Mailscanner antivirus update notify

[Chris Lyon]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Erick Perez
> Sent: Monday, May 10, 2004 3:49 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Mailscanner antivirus update notify
> 
> right, but it will be nice to have it as a feature/option of the
> MailScanner
> distro because it is useful.
> Yes, you could drop some sendmail stuff in the update script, i just think
> that as a release feature it will be nicer.
> 
> PS Alex :No, nothing yet. might change in a few days.

The /var/log/maillog will have details on when an update occurred but not
the details of what got updated. If you just want to know that an update
happened and when, /var/log/maillog is the file for you. If you want the
details of the update, how many signatures, version level...etc you can find
that in the /tmp/ClamAV.update.log. This log is appended every time the cron
job kicks off. FYI, most of the lines are the same until there is an update.
When there is any update, will see "Database updated" and that entire
section will have all the details.  

So, swatch, perl script, logwatch. Pick the method to e-mail.  

BTW, mailstats provides AV Updated: <InsertDate> in there web reporting.
They just look in the /tmp/log/maillog for when the last update happened. It
doesn't fire an e-mail but if you know perl you get add that to it. Check
MailScanner's FAQ for details on MailScanner.



> 
> 
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf
> Of Alex Neuman
> Sent: Monday, May 10, 2004 5:31 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Mailscanner antivirus update notify
> 
> In /etc/cron.hourly there's a file called "update_virus_scanners". Since
> it
> has no output, cron doesn't tell you about it. Make it output something at
> that stage and you'll know what happened.
> 
> Otherwise that script calls /usr/sbin/update_virus_scanners, where you
> could
> also do something with Bash (like sendmail -s "ClamAV Script Update"
> root) to tell yourself.
> 
> Remember that any output of a cron job gets e-mailed to root (or whoever
> owns the cron job). If you send yourself e-mail using sendmail, you don't
> need to create any output. Likewise, if you create output, you don't need
> to
> send e-mail (unless root is separate from the administrative account).
> 
> PS: Nada de lo mío todavía? ;D
> 
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf
> Of Erick Perez
> Sent: Monday, May 10, 2004 5:25 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Mailscanner antivirus update notify
> Importance: High
> 
> 
> I would like to receive an email everytime MailScanner makes an update to
> my
> AV (currently CLAMAV). Is there an esay way to do this? It will be nice to
> know when something has gone bad because it took me two days to realize my
> clamav was not being updated (due to freshclam not being in /usr/local as
> the config assumed and me being lazy with the logs).
> 
> i have my system set up to fire an email for almost all operations and
> would
> like to continue do so....
> 
> BTW MailScanner with ClamAV rules!
> 
> Thanks,
> Erick.
> 
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html
> 
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html
> 
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html