Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Is this in the manual/docs ? if so then IAP I realised after my post that nearly all our clients are using win32 clamav so in addition to our servers, there are some 50 client machines all querying the clamav databases, probably every hour most likely more often if I know M$ lovers. Making all users aware of the proxy cache will now mean we will only have one machine check and download. Everyone else can get it from that server. How do I (as admin) stop internal clients going outside for updates and force them to use my cache. (Once I set it up). They have all just installed it themselves when their commerical scanners license ran out and I can't really stop them from connecting to my www proxy on port 80. Jim :-) Dr James Allen GnuPG key : ftp://ftp.heartsine.co.uk/hst_gpg_public_keys/jim.allen.hst.gpg.asc No need for some magic freshcache. Just run freshclam on one of your servers, run a webserver on it (maybe allowing only your machines to use it if you want so) and instruct other machines' freshclams to use your webserver (DatabaseMirror directive in freshclam.conf) as the source for updates. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQFBIibdRdAZy0oJ0LwRAhoEAJ9Q4o453nq23zYd0j1l0atDKretBwCfWiFC ejhMWVYPKjNApV609WZQ7Ac= =J2A9 -END PGP SIGNATURE- --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Tue, 2004-08-17 at 16:40, [EMAIL PROTECTED] wrote: so in addition to our servers, there are some 50 client machines all querying the clamav databases, probably every hour most likely more often if I know M$ lovers. Making all users aware of the proxy cache will now mean we will only have one machine check and download. Everyone else can get it from that server. How do I (as admin) stop internal clients going outside for updates and force them to use my cache. (Once I set it up). Many ways. They have all just installed it themselves when their commerical scanners license ran out and I can't really stop them from connecting to my www proxy on port 80. You can stop them connecting to your proxy - it may not make for happy clients very happy though. You could: - Block access to just the databse update site - Set a policy for using clam updates, and apply it. - Add a DNS authoritative domain on your INTERNAL DNS so updates get directed to your own server. - Use a redirector on your proxy server. I'm sure there are other methods. -trog signature.asc Description: This is a digitally signed message part
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
How do I (as admin) stop internal clients going outside for updates and force them to use my cache. (Once I set it up). You need a transparent proxy in-line on your network connection (eg just in front of your firewall or router). G --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Wed, 18 Aug 2004 at 7:22:35 -0700, Dennis Peterson wrote: Tomasz Kojm wrote: You can setup your own (internal) database mirror. Freshclam connects to the httpd (80) port of DatabaseMirror, so you only need to download databases into a root directory of your www server (freshclam --datadir=, or edit DatabaseDirectory in freshclam.conf) and point other freshclams to this server. Any chance that port could be made configurable? 80 is not an option in my environment. At least in case of using proxy: HTTPProxyServer STR, HTTPProxyPort NUM Use given proxy server and TCP port for database downloads. freshclam.conf(5) -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Mon, 16 Aug 2004 at 21:55:16 +0200, Niek wrote: I don't know what your return times of the sourceforge mailing lists are. But over here, it can take up to 1.5, 2hours during USA daytime. Indeed. We are planning to move MLs to a new server in September. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Mon, 16 Aug 2004 at 16:48:44 -0400, Mike Robinson wrote: Ok, so we can't do that, but can you suggest a better method than running freshclam every hour? I would think that the clamav development team would be interested in doing a push to sites that wanted them, because these are probably the same sites that update on an hourly basis right now. There will be a new method implemented in freshclam, based on DNS entries with short TTLs. Whenever the entry changes, freshclam will try to update database. You can read the thread Idea for more timely virusdb updates and especially the following message: --- From: Tomasz Kojm [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] Idea for more timely virusdb updates Message-Id: [EMAIL PROTECTED] Date: Fri, 13 Aug 2004 22:34:43 +0200 On Sat, 14 Aug 2004 08:02:51 +1200 Jason Haar [EMAIL PROTECTED] wrote: DNS for serial numbers plus HTTP for actual data transfer still sounds New version of freshclam will work in this way. Big thanks to all for the interesting thread ! -- oo. Tomasz Kojm [EMAIL PROTECTED] [...] -- -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 What about a freshclam cache. Many users probably have several if not many servers all running clamav. If we had a freshcached daemon running on a secure server we could point all other servers to that cache. Or better yet have that daemon notify a list of clamd's on different machines that there is an update. There are pros and cons with all the suggestions so far but I think this one has more pros than cons. Also it should not be to hard to implement and give us time to come up with a better approach. If we currently have four servers checking every hour. With a cache, just one update (through both our and clamav's valuable banmdwidth) causes four machines to get updated. The other three only eat up internal network bandwidth. Since clamd has support for digital signatures all the internal servers can be happy that the cache is actually dishing out good stuff. Using this we could even change the update rate to once every 15 minutes and still use the same bandwidth. If internal notification is problematic ( or even just meantime to get it going) the internal servers could poll the cache checking every 5 minutes. Although there are lots of pros and cons :- You lose the cache - no server updates Losing your secure server - you are in bigger trouble than just not getting mail There is one thing I like about this ; with the updates controlled by one process, the clamd updates can standardise. Changing the update mechanism only means changing the freshcached code. On a standalone system a clamd process would have its own freshcached process. Do it the unix way - split the problem into separate processes that do their job and only their job the best way possible. Jim :-) Dr James Allen GnuPG key : ftp://ftp.heartsine.co.uk/hst_gpg_public_keys/jim.allen.hst.gpg.asc -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQFBId+xRdAZy0oJ0LwRAkv2AJ4wail16X9MZpdyoEoAlTff2PfKCgCeIk8r UwuVqA+hqOM29fkYzepBy+M= =ter8 -END PGP SIGNATURE- --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Tue, 17 Aug 2004 at 11:36:30 +0100, [EMAIL PROTECTED] wrote: What about a freshclam cache. Many users probably have several if not many servers all running clamav. If we had a freshcached daemon running on a secure server we could point all other servers to that cache. Or better yet have that daemon notify a No need for some magic freshcache. Just run freshclam on one of your servers, run a webserver on it (maybe allowing only your machines to use it if you want so) and instruct other machines' freshclams to use your webserver (DatabaseMirror directive in freshclam.conf) as the source for updates. You lose the cache - no server updates Losing your secure server - you are in bigger trouble than just not getting mail As a last resort, on client servers you can run additional freshclam processes checking for updates far less often, directly to official mirrors. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Mon, 2004-08-16 at 22:48, Mike Robinson wrote: Ok, so we can't do that, but can you suggest a better method than running freshclam every hour? I would think that the clamav development team would be interested in doing a push to sites that wanted them, because these are probably the same sites that update on an hourly basis right now. Regards, Mike Hi Mike, Depends on your setup. If you're running a small-scale system, run it every 2 hours. If you have 500+ users, run it once an hour, but please dont run it on the hour. Best regards, Denis -- Denis De Messemacker GnuPG Key-ID: 0x02787880 [EMAIL PROTECTED] http://www.e-labs.org [EMAIL PROTECTED] http://www.ClamAV.net - A GPL virus scanner --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Tue, 17 Aug 2004 11:36:30 +0100 (BST) [EMAIL PROTECTED] wrote: If we currently have four servers checking every hour. With a cache, just one update (through both our and clamav's valuable banmdwidth) You can setup your own (internal) database mirror. Freshclam connects to the httpd (80) port of DatabaseMirror, so you only need to download databases into a root directory of your www server (freshclam --datadir=, or edit DatabaseDirectory in freshclam.conf) and point other freshclams to this server. -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Tue Aug 17 13:24:39 CEST 2004 pgpHRwTyCOl1e.pgp Description: PGP signature
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Tue, 17 Aug 2004 [EMAIL PROTECTED] wrote: Many users probably have several if not many servers all running clamav. If we had a freshcached daemon running on a secure server we could point all other servers to that cache. Or better yet have that daemon notify a run freschclam on one machine, use on-update-execute to run an rsync script after a successfull download to update all your other machines. == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Internet Services of Westchester http://www.westnet.com/ --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
run freschclam on one machine, use on-update-execute to run an rsync script after a successfull download to update all your other machines. == Chris Candreva -- [EMAIL PROTECTED] Does the clamd process need to be signaled on each machine to recognize the new db? m/ --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Tue, 17 Aug 2004 12:38:17 -0700 in [EMAIL PROTECTED] Mitch \(WebCob\) [EMAIL PROTECTED] wrote: Does the clamd process need to be signaled on each machine to recognize the new db? Yes. -- Brian Morrison bdm at fenrir dot org dot uk GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Tue, 2004-08-17 at 11:36, [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 What about a freshclam cache. Many users probably have several if not many servers all running clamav. If we had a freshcached daemon running on a secure server we could point all other servers to that cache. Or better yet have that daemon notify a list of clamd's on different machines that there is an update. There are pros and cons with all the suggestions so far but I think this one has more pros than cons. Also it should not be to hard to implement and give us time to come up with a better approach. You can do that already by using your own web server. Do it the unix way - split the problem into separate processes that do their job and only their job the best way possible. and thats what freshclam does. It updates the virus signatures. All you need to do is tell it where to update them from. -trog signature.asc Description: This is a digitally signed message part
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Tue, 17 Aug 2004, Mitch (WebCob) wrote: run freschclam on one machine, use on-update-execute to run an rsync script after a successfull download to update all your other machines. Does the clamd process need to be signaled on each machine to recognize the new db? Yes, but you can configure clamd to run a selfcheck (which would find the database update) more often: (from the clamav.conf file) # Do internal checks (eg. check the integrity of the database structures) # By default clamd checks itself every 3600 seconds (1 hour). #SelfCheck 600 Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Tue, 17 Aug 2004, Mitch (WebCob) wrote: Does the clamd process need to be signaled on each machine to recognize the new db? Yes. Here are the pieces - there are probably simpler ways to do most of this now. The cron job: /usr/local/bin/freshclam --daemon-notify --log=/var/adm/clam-update.log \ --on-update-execute=/usr/local/share/clamav/ClamPush.sh \ --quiet (and yes, on-update-execute can go in the config file now) :) ClamPush.sh does: $RSYNC -avzr --rsh=$SSH $CLAMDIR/*.cvd OtherHost:$CLAMDIR $SSH OtherHost /usr/local/sbin/clamd-reload.pl Since freshclam runs as user clamav, the rsync/ssh is done as user clamav. Set up permissions accordingly and distribute proper ssh keys. clamd-reload.pl is simply: #!/usr/local/bin/perl our $clamd = '/etc/init.d/clamd'; use IO::Socket::UNIX; $sock = IO::Socket::UNIX-new(Peer = /var/clamav/clamav.sock, Type = SOCK_STREAM, Timeout = 10) || RestartClamd ; $sock-send(RELOAD) ; $sock-recv($mesg, 1024) ; print $mesg,\n; exit (0); Uh, ok -- maybe it's not all that simple. :-) == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Internet Services of Westchester http://www.westnet.com/ --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Tue, Aug 17, 2004 at 11:36:30AM +0100, [EMAIL PROTECTED] said: What about a freshclam cache. [snip] Do it the unix way - split the problem into separate processes that do their job and only their job the best way possible. squid, anyone? -- -- | Stephen Gran | It's hard not to like a man of many | | [EMAIL PROTECTED] | qualities, even if most of them are | | http://www.lobefin.net/~steve | bad.| -- pgpGEA2d5ZOaF.pgp Description: PGP signature
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
What about a freshclam cache. Many users probably have several if not many servers all running clamav. If we had a freshcached daemon running on a secure server we could point all other servers to that cache. Why not use squid and point httpproxy in freshclam.conf to there? Jim :-) -Nigel --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Sun, 15 Aug 2004, Mitch (WebCob) wrote: ; Please always try to _avoid_ to have cron based internet ; services run by the ; hour. Please consider another value than 0. What about 17 or 41 ; as the value ; for the minute? ; ; As per discussions on this list on awhile ago; I use the following for ; my crontab entry ;0 * * * * sleep $[ $RANDOM % 1800 ] ; /usr/local/bin/freshclam --quiet ; this causes it to sleep for a random period of time not exceeding 30 min ; before executing. ; ; Hmmm - couldn't this THEORETICALLY result in freshclam being run every few ; seconds? ; ; I know it's random, but without a lower end on the value, it is possible - ; right? No, the cron job only runs on the hour (minute == 0) so it will only run once per hour at a random time between hh:00 and hh:30. A. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
No, the cron job only runs on the hour (minute == 0) so it will only run once per hour at a random time between hh:00 and hh:30. A. D'oh! Note to self - don't think you are smart when you're tired! Thanks. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
Why not just do what I've been working on. Just set up a procmail rule that runs freshclam whenever you get a message from the clamav-virusdb list. It should work just as good as the clamav team sending you a virusdb push every time the database is updated. Regards, Mike Mike Robinson, UNIX Administrator E-mail: [EMAIL PROTECTED] Information Technology http://www.marietta.edu/~robinsom Marietta College 215 5th St Voice: (740) 376-4616 Marietta, OH 45750 Fax: (740) 376-4896 ---BeginMessage--- No, the cron job only runs on the hour (minute == 0) so it will only run once per hour at a random time between hh:00 and hh:30. A. D'oh! Note to self - don't think you are smart when you're tired! Thanks. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users ---End Message---
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
At 18:53 16/08/2004, Mike Robinson wrote: Why not just do what I've been working on. Just set up a procmail rule that runs freshclam whenever you get a message from the clamav-virusdb list. It should work just as good as the clamav team sending you a virusdb push every time the database is updated. Can you give us the detail of that rule? I've also been meaning to do that for months, but not got round to it. Cheers Brian -- Brian J Read www.abandonmicrosoft.co.uk www.theonlineorganiser.com www.thepersonalknowledgebase.com +44 1695 723723 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.737 / Virus Database: 491 - Release Date: 11/08/2004
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On 8/16/2004 7:53 PM GMT+2, Mike Robinson wrote: Why not just do what I've been working on. Just set up a procmail rule that runs freshclam whenever you get a message from the clamav-virusdb list. It should work just as good as the clamav team sending you a virusdb push every time the database is updated. I don't know what your return times of the sourceforge mailing lists are. But over here, it can take up to 1.5, 2hours during USA daytime. Regards, Niek Baakman --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
:0 * ^X-BeenThere:[EMAIL PROTECTED] | nice -n 5 /usr/local/bin/freshclam --quiet This one should work...not certain, but that's as far as I've gotten so far... Regards, Mike ---BeginMessage--- At 18:53 16/08/2004, Mike Robinson wrote: Why not just do what I've been working on. Just set up a procmail rule that runs freshclam whenever you get a message from the clamav-virusdb list. It should work just as good as the clamav team sending you a virusdb push every time the database is updated. Can you give us the detail of that rule? I've also been meaning to do that for months, but not got round to it. Cheers Brian -- Brian J Read www.abandonmicrosoft.co.uk www.theonlineorganiser.com www.thepersonalknowledgebase.com +44 1695 723723 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.737 / Virus Database: 491 - Release Date: 11/08/2004 ---End Message---
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Mon, 2004-08-16 at 19:53, Mike Robinson wrote: Why not just do what I've been working on. Just set up a procmail rule that runs freshclam whenever you get a message from the clamav-virusdb list. It should work just as good as the clamav team sending you a virusdb push every time the database is updated. Regards, Mike You should not do that, here are two reasons: Firstly, there is a long delay between the moment when a maintainer do an update and the receive of the mail in clamav-virusdb. Often 2 or 3 hours. Sourceforge mailing lists are actually posting messages 2 hours after posting. Maintainer has also to make the announcement and complete the processing of the samples after the update. This can sometime take 1 hour. Secondly, you could have a problem receiving mails, Sourceforge could have difficulties, or we could forget to post the notification. Last point never happened, but who knows ... Best regards, Denis De Messemacker -- Denis De Messemacker GnuPG Key-ID: 0x02787880 [EMAIL PROTECTED] http://www.e-labs.org [EMAIL PROTECTED] http://www.ClamAV.net - A GPL virus scanner --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
Ok, so we can't do that, but can you suggest a better method than running freshclam every hour? I would think that the clamav development team would be interested in doing a push to sites that wanted them, because these are probably the same sites that update on an hourly basis right now. Regards, Mike ---BeginMessage--- On Mon, 2004-08-16 at 19:53, Mike Robinson wrote: Why not just do what I've been working on. Just set up a procmail rule that runs freshclam whenever you get a message from the clamav-virusdb list. It should work just as good as the clamav team sending you a virusdb push every time the database is updated. Regards, Mike You should not do that, here are two reasons: Firstly, there is a long delay between the moment when a maintainer do an update and the receive of the mail in clamav-virusdb. Often 2 or 3 hours. Sourceforge mailing lists are actually posting messages 2 hours after posting. Maintainer has also to make the announcement and complete the processing of the samples after the update. This can sometime take 1 hour. Secondly, you could have a problem receiving mails, Sourceforge could have difficulties, or we could forget to post the notification. Last point never happened, but who knows ... Best regards, Denis De Messemacker -- Denis De Messemacker GnuPG Key-ID: 0x02787880 [EMAIL PROTECTED] http://www.e-labs.org [EMAIL PROTECTED] http://www.ClamAV.net - A GPL virus scanner --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users ---End Message---
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
Am Saturday 14 August 2004 02:56 schrieb Julio Galicia: Hi, 0 */4 * * * root /usr/local/bin/freshclam 2/tmp/freshclam.txt; cat \ /tmp/freshclam.txt | mail -s Actualizacion Antivirus jgalicia Please always try to _avoid_ to have cron based internet services run by the hour. Please consider another value than 0. What about 17 or 41 as the value for the minute? Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold Partner - Beratende Ingenieure und Physiker Nobelstrasse 15, 70569 Stuttgart, Germany fon: 0711 67400963, fax: 0711 67400959 email: [EMAIL PROTECTED] --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
On Sat, Aug 14, 2004 at 07:43:21AM +0200, Martin Konold wrote: Please always try to _avoid_ to have cron based internet services run by the hour. Please consider another value than 0. What about 17 or 41 as the value for the minute? As per discussions on this list on awhile ago; I use the following for my crontab entry 0 * * * * sleep $[ $RANDOM % 1800 ] ; /usr/local/bin/freshclam --quiet this causes it to sleep for a random period of time not exceeding 30 min before executing. Rob -- Random Tagline: Nondeterminism means never having to say you are wrong. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}
El jue, 12-08-2004 a las 18:46, Philip Ershler escribió: What do folks think is an appropriate interval for a cron job to run freshclam? Is once an hour reasonable? Thanks, Phil This is my line in /etc/crontab: 0 */4 * * * root /usr/local/bin/freshclam 2/tmp/freshclam.txt; cat \ /tmp/freshclam.txt | mail -s Actualizacion Antivirus jgalicia What it means: every four hours execute freshclam and send me an email with results. Saludos Julio Galicia signature.asc Description: Esta parte del mensaje =?ISO-8859-1?Q?est=E1?= firmada digitalmente
