Paul wrote: > > On 24 Jul 2007 at 16:27, Michael Parker wrote: > >> Well, thanks for the help on this, I got clam running no bother! (Just a >> bit of googling and thinking needed!!) >> >> Quick question - moving on a bit - re sanesecurity... >> >> 1. where do you put the sigs on a debian system? > > Same as the others downloaded by freshclam - > by default in /var/lib/clamav > >> 2. are they reliable? > > Sanesecurity - yes.
+1 > The MSRBL ones which seem to be downloaded as > well with the usual scripts - less good. > FP's are not unknown, and corrupt sigs too, > although my experience has been OK for the > last year or so. > If you want to be cautious, disable them, or > at least the images. The MSRBL-Images sigs are the ones most people have issues with, the MSRBL-Spam sigs are pretty tame(IMHO), I've not had a false positive from them. >> 3. is it generally considered a good idea to use them? > > The SS ones, yes. Stops a lot of phising and > pdf. +1 > I understand some of the SS sigs are > being incorporated into the main clamav sigs. I'm not sure on that one, i think the author is just working with the ClamAV team. Could be wrong. Kevin ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
