[Rspamd-Users] Kaspersky Anti Virus with rspamd

[Rob Gunther]

I have been able to get it working, using the ICAP interface of Kaspersky
Web Traffic Security 6.0.  To connect it to Rspamd, I used the External
Services module.

I wrote about it on this board a week or two ago.  Out of the box Kasperky
was not returning the correct ICAP headers.  Kaspersky's tech support and
purchasing process was a total nightmare.

I've also got a couple 'issues' with the product, the main one being that
it will 'clean' some of the infections it finds.   Once it cleans the
infected files, it reports it back to Rspamd as being clean when in reality
it is not because Rspamd is just using the reply from the software and not
any clean version of the file.  So some infections actually make it past
this setup, because Kasperky considers them clean.

There is probably some way to turn that 'feature' off but I can't find it,
it is certainly not documented and their support sucks.

We have a couple of AV scanners connected to Rspamd, so if Kaspersky lets a
few viruses through hopefully the other scanners stop them.

On Sun, Aug 4, 2019 at 1:04 PM Durga Prasad Malyala <dp.malyala at gmail.com>
wrote:

> Hello all,
> Can i use the Kaspersky for Linux file server or workstation edition?
>
> The document
> https://rspamd.com/doc/modules/antivirus.html#kaspersky-specific
> talks about the mail server version only as per my understanding. i.e.
> Kaspersky Security 8.0.1 For Linux Mail Server.
>
> I want to buy the command line work station edition instead of the
> mail server edition which is counted on mailboxes, Whereas the
> workstation edition is a per server license.
> Or do i need the file server option for performance reasons.
> I generally don't use file server editions in mail servers since they
> have features like access on demand etc which is not needed and slows
> down the server.
>
> Does anyone have any steps for integrating kaspersky workstation or
> file server edition with rspamd? please share as it will be a great
> help.
>
> Thanks for any suggestions.
> DP
> --
> Users mailing list
> Users at lists.rspamd.com
> https://lists.rspamd.com/mailman/listinfo/users
>