Mailing List Archive: ClamAV: users

Re: [clamu] Freshclam Stuck ?

Index | Next | Previous | View Threaded

cgregory at hwcn

Jun 16, 2009, 7:42 AM

Post #1 of 5 (761 views)
Permalink

Re: [clamu] Freshclam Stuck ?

On Tue, 16 Jun 2009, Robert wrote:
> Freshclam 0.95.2 running from cron on an Linux FC8 system.
> Getting no further than......
> Downloading safebrowsing-4551.cdiff [100%]

I have NOT experienced this problem.
1) I am still on 0.95.1 not .2 (on Centos 4.5 system).
2) I use the db.ca.clamav.net mirror, not the UK one.
3) I don't see any references to files named 'safebrowsing*' in my logs.
Looks like I only download 'main' and 'daily' diff files....

Hope this helps!
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

uhlar at fantomas

Jun 16, 2009, 7:59 AM

Post #2 of 5 (700 views)
Permalink

Re: [clamu] Freshclam Stuck ? [In reply to]

> On Tue, 16 Jun 2009, Robert wrote:
> > Freshclam 0.95.2 running from cron on an Linux FC8 system.
> > Getting no further than......
> > Downloading safebrowsing-4551.cdiff [100%]

On 16.06.09 10:42, Charles Gregory wrote:
> I have NOT experienced this problem.
> 1) I am still on 0.95.1 not .2 (on Centos 4.5 system).

I'm running 0.95.1, the debian one

> 2) I use the db.ca.clamav.net mirror, not the UK one.

should not affect any problems

> 3) I don't see any references to files named 'safebrowsing*' in my logs.
> Looks like I only download 'main' and 'daily' diff files....

You apparently don't have "SafeBrowsing yes" in freshclam.conf.

--
Matus UHLAR - fantomas, uhlar [at] fantomas ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
It's now safe to throw off your computer.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

cgregory at hwcn

Jun 16, 2009, 8:23 AM

Post #3 of 5 (698 views)
Permalink

Re: [clamu] [clamu] Freshclam Stuck ? [In reply to]

On Tue, 16 Jun 2009, Matus UHLAR - fantomas wrote:
> You apparently don't have "SafeBrowsing yes" in freshclam.conf.

Had a look at the relevant FAQ's....
I like the idea, but naturally I'm a bit worried about potential
false positives. What has the track-record of this add-on been like?
Can I safely treat a 'found' Safebrowsing link as a virus and REJECT
the mail at my SMTP gateway same as with regular viruses?

- Charles
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

uhlar at fantomas

Jun 16, 2009, 8:43 AM

Post #4 of 5 (706 views)
Permalink

Re: [clamu] [clamu] Freshclam Stuck ? [In reply to]

> On Tue, 16 Jun 2009, Matus UHLAR - fantomas wrote:
> > You apparently don't have "SafeBrowsing yes" in freshclam.conf.

On 16.06.09 11:23, Charles Gregory wrote:
> Had a look at the relevant FAQ's....
> I like the idea, but naturally I'm a bit worried about potential
> false positives. What has the track-record of this add-on been like?
> Can I safely treat a 'found' Safebrowsing link as a virus and REJECT
> the mail at my SMTP gateway same as with regular viruses?

I would be careful about this too, so I even asked for feature of
clamav-milter that could help here, e.g. excluding some signatores e.g.
SafeBrowing.* or Phishing.*,

I'm testing the safebrowsing on my machine to see effects.
Currently I see only one hit and can't check archives of that mailing list
to see if it was correct...

--
Matus UHLAR - fantomas, uhlar [at] fantomas ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"They say when you play that M$ CD backward you can hear satanic messages."
"That's nothing. If you play it forward it will install Windows."
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

njones at megan

Jun 16, 2009, 8:50 AM

Post #5 of 5 (699 views)
Permalink

Re: [clamu] [clamu] Freshclam Stuck ? [In reply to]

Charles Gregory wrote:
> On Tue, 16 Jun 2009, Matus UHLAR - fantomas wrote:
>> You apparently don't have "SafeBrowsing yes" in freshclam.conf.
>
> Had a look at the relevant FAQ's....
> I like the idea, but naturally I'm a bit worried about potential
> false positives. What has the track-record of this add-on been like?
> Can I safely treat a 'found' Safebrowsing link as a virus and REJECT
> the mail at my SMTP gateway same as with regular viruses?
>
> - Charles

I get close to zero hits from the safebrowsing database on
incoming email. The handful of hits over the last several
months appeared to be spam. YMMV and all that.

I disabled it earlier this morning ("Safebrowsing no" in
freshclam.conf) because the updates appeared to be hanging
freshclam.

-- Noel Jones
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads