Updates Script to fetch Steve Basford's Phihing Sigs for Clam AV

[Ken A]

Julian Field wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Randal, Phil wrote:
>>> Randal, Phil a écrit :
>>>     
>>>> Folks,
>>>>
>>>> Steve Basford has a ClamAV phishing database over at
>>>>  
>>>>    http://www.sanesecurity.com/clamav/
>>>>
>>>> and has recently updated his site to provide a gzipped version of the
>>>> file.
>>>>
>>>> The attached script is a modified version of the one I posted to this
>>>> list back in March.  This version uses curl to fetch newer versions
>>>>       
>> of
>>   
>>>> the gzipped database.
>>>>
>>>> It should be run no more than once hourly, and Steve says that 4
>>>>       
>> times a
>>   
>>>> day is sufficient.
>>>>
>>>> Can people using the old script please update to this one to save the
>>>> load on Steve's server.
>>>>   
>>>>       
>>> Phil,
>>>     
>>   
>>> I had to specify /sbin/service in the script because /sbin was not in 
>>> root's path under cron.
>>>     
>>   
>>> BTW: is it necessary to reload MS?
>>>     
>>   
>>> Denis
>>>     
>> Good catch!  I use clamavmodule here and am never sure whether a reload
>> is necessary after a virus pattern update, so erred on the side of
>> caution.
> May I point you at this in your MailScanner.conf file?
> 
> # ClamAVModule only: monitor each of these files for changes in size to
> # detect when a ClamAV update has happened.
> # This is only used by the "clamavmodule" virus scanner, not the "clamav"
> # scanner setting.
> Monitors for ClamAV Updates = /usr/local/share/clamav/*.cvd

If you are using Steve Basford's Phishing you should probably change the 
line in MailScanner.conf to /usr/local/share/clamav/*.*
or maybe /usr/local/share/clamav/*.[cn]??
because sigs are phish.ndb

Thanks,
Ken A
Pacific.Net


> It automatically detects pattern updates and reloads MailScanner as and 
> when necessary for you. I have already done all the hard work for you :-)
> 
> - -- 
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
> 
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.0.6 (Build 6060)
> 
> iQA/AwUBRF/DpBH2WUcUFbZUEQLOBACglGlPMLJwD2oqE5wNJIvC5N3XewAAn3XD
> nBAxEPpG9XoijChzjZcCU2Lg
> =KKnG
> -----END PGP SIGNATURE-----
>