Free ClamAV alternative working with Amavis on Linux ARMHF

Question

ClamAV is a virus scanner engine which a.o. works together with Amavis to check incoming mail for viruses. Unfortunately, it has two disadvantages: high resource consumption, and not the best detection rate (euphemism: in the linked results, it ranks at the end of the lists – same here). So I want to replace it with a better alternative.

Requirements

• works on Linux ARMHF
• lightweight
• good detection rate (and low rate of "false positives")
• integrates with amavisd-new
• not too tricky to install (preferred: .deb for Debian Wheezy and up, best via repository)
• free (open-source preferred)

The environment is non-commercial ("ORG"). The virus scanner is just intended as a "convenience" for those few "mail clients" running on a Windows system – which somehow doesn't justify a solution eating about a third of all available RAM on the mail server while not offering real good protection.

---

2 years later, and still no answer here. Neither did I find something elsewhere, and meanwhile ClamAV is eating almost half of the RAM, getting killed by the OOM multiple times a day.

For those of you not having the ARM restriction, find some solutions at Alternative to clamav that works with amavisd-new. One of the solutions offered there (Sophos) would suit me fine if it were available on ARMHF …

Answer 1

Look into the commented parameters in the amavis-new config you'll find many other options like clamav (nearly preconfigured). Many of them like KasperSky have stopped providing support but there are still some options. Every antivirus have it's own way of performing so as far as performance is considered you'll have to try them one by one, you can write bash/python script which can simulate the good and bad email sending. Also there are some forks of clamav like Malscan which can be used but as far as I know they require more resources than clamav itself. I'll be glad if you keep me in loop.