Re: [Snort-inline-users] Snort/Clamav and Email Attachements

[<dra...@gf...>]

Hi,

snort is not replacment for smtp filtering so it's normal,it can block
viruses in http,ftp...eicar signature is updated and sometimes it isn't
detected.For testing purposes you can try downloading real viruses from
www.gfos.hr/~dragovic/nest

Regards,
Dino Dragovic

> Hello again,
>
> I would want to know if it is normal that real viruses are not detected
> when they are sent as an email attachement. But the virus is detected
> with FTP, HTTP and IRC.
>
> For information : EICAR virus is detected only with IRC DCC File transfert
>
> Best Regards,
> Olivier BONHOMME
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: New Crystal Reports XI.
> Version 11 adds new functionality designed to reduce time involved in
> creating, integrating, and deploying reporting solutions. Free runtime
> info,
> new features, or free trial, at: http://www.businessobjects.com/devxi/728
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>