On 29 Sep 2003, Derek Morris wrote:
> Rather than creating rules specific to a particular virus, anomy can
> call an external virus program for identification. Once a virus is
> identified then anomy can be used to remove it from the message,
> quarantine it, warn the user, or some other action.
> It is also used to enforce policies like not allowing executable files,
> not wasting time scanning known safe file types, etc.
Incidentally there are some Open Source Virus Scanners out there,
or Anomy can be used with commercial ones. There's an example file
somewhere (comes with Anomy, I think) which has examples of how to include
most common virus scanners; that would probably be a good spot to start
looking for them. The only FOSS one which springs to mind is ClamAV, but
I know there is also at least one other.
-- Tim Nelson Systems Administrator Sunet Internet Tel: +61 3 5241 1155 Fax: +61 3 5241 6187 Web: http://www.sunet.com.au/ Email: firstname.lastname@example.org