Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: ClamAV: users

Script updated: clamav-unofficial-sigs.sh (v3.6)

 

 

ClamAV users RSS feed   Index | Next | Previous | View Threaded


bill at inetmsg

Aug 23, 2009, 11:15 PM

Post #1 of 3 (532 views)
Permalink
Script updated: clamav-unofficial-sigs.sh (v3.6)

Hi Folks,

It's been awhile, but I finally found some time to work on an update to
the clamav-unofficial-sigs script. Based on feedback and user requests,
here is what has changed in this release (from the CHANGELOG):

Version 3.6 (updated 2009-08-23)
- Added "tr" to remove Windows CRLF from signatures in local.ign
monitoring section.
- Updated signature database monitoring section to better handle
rearrangement of signature database file name placement in the
configuration file.
- Removed several of the config file reload options in favor of
simplicity and most reliable options.
- Changed rsync mirror lookup from 'host' to 'dig' with the hope
that 'dig' is more universally consistent between OS platforms.
Issue reported by Al Sterman.
- Added the '-u' (timestamp check) flag to the rsync downloads so
that signature databases will not be downloaded from mirrors that
are out of sync and hosting old files. Requested by Wolfgang Breyha
- Added a configuration variable that will provide the ability to
scan a HAM (non-spam) directory with new signature databases and
automatically remove signatures that trigger from the database
before implementing. Requested by Mike Cardwell.
- Added the '-t' flag to the script to output third-party signatures
that trigger during the HAM directory scan, but only if the 'ham_dir'
variable is enabled in the configuration file and hit were found.
- Updated required utilities section of the config file. Requested
by Micah Anderson.
- Updated Manual page, README, and INSTALL files.

There *WERE* changes made to script's configuration file with this
release, so please review the config file to determine if you need/want
to upgrade the config file included with this release.

The updated tarball can be downloaded from:

http://www.inetmsg.com/pub/clamav-unofficial-sigs.tar.gz

As usual, let me know if there are any issues, suggestions, or feature
requests.

Bill

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


ged at jubileegroup

Aug 24, 2009, 11:47 AM

Post #2 of 3 (470 views)
Permalink
Re: Script updated: clamav-unofficial-sigs.sh (v3.6) [In reply to]

Hi Bill,

On Mon, 24 Aug 2009 Bill Landry wrote:

Re: Script updated: clamav-unofficial-sigs.sh (v3.6)
> It's been awhile, but I finally found some time to work on an update to
> the clamav-unofficial-sigs script. [snip]

Thanks once again for your efforts Bill (and of course thanks to the
ClamAV team too should go without saying. :)

You've prompted me to wonder out loud if anyone here knows the MSRBL
databases listed in your example config file are still being updated?
I saw that you aren't getting a lot of response from your messages on
the MSRBL mailing list, or I'd have asked there first...

--

73,
Ged.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


bill at inetmsg

Aug 24, 2009, 12:15 PM

Post #3 of 3 (485 views)
Permalink
Re: Script updated: clamav-unofficial-sigs.sh (v3.6) [In reply to]

> Hi Bill,
>
> On Mon, 24 Aug 2009 Bill Landry wrote:
>
> Re: Script updated: clamav-unofficial-sigs.sh (v3.6)
>> It's been awhile, but I finally found some time to work on an update to
>> the clamav-unofficial-sigs script. [snip]
>
> Thanks once again for your efforts Bill (and of course thanks to the
> ClamAV team too should go without saying. :)

You're welcome!

> You've prompted me to wonder out loud if anyone here knows the MSRBL
> databases listed in your example config file are still being updated?
> I saw that you aren't getting a lot of response from your messages on
> the MSRBL mailing list, or I'd have asked there first...

I've gotten no responses to my posting to the list nor to messages I've
sent directly to Chris Burton.

The last updates from MSRBL were last month:

-rw-r--r-- 1 root root 181337 2009-07-24 03:40 MSRBL-Images.hdb
-rw-r--r-- 1 root root 244643 2009-07-27 01:21 MSRBL-SPAM.ndb

when typically in the past we would several updates per day on the SPAN
database. You might try posting to the MSRBL list to see if anyone there
knows what's going on with them...?

Bill

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

ClamAV users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.