Another call for improvements

[Randal, Phil]

My very basic script to get the sanesecurity phishing sigs for clamAV is
attached.  I've no idea what locking should be done.

One thing I'd like MailScanner to do is to keep feeding sa-learn when
the cached spamassassin response says autolearn=true.  That would help
push bayes scores up to bayes_99 as fast as possible.  Or am I missing
something?

Cheers,

Phil

--
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK  

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf 
> Of Julian Field
> Sent: 31 May 2006 08:40
> To: MailScanner discussion
> Subject: Re: Another call for improvements
> 
> 
> On 30 May 2006, at 23:21, Richard Siddall wrote:
> 
> > Julian Field wrote:
> >
> >> Any of you got any features which you really need?
> >> I don't guarantee to implement them, or even consider them :-)
> >>
> >
> > Nothing I really need.  However, there are a few ideas:
> >
> > 1/ A version of Phil Randal's script to download the supplemental  
> > ClamAV
> > phishing signatures from Steve Basford's SaneSecurity.com which uses
> > MailScanner's locking to ensure that the database isn't updated  
> > during a
> > scan, and doesn't hit Steve's site more than 4 times a day.
> 
> Where do I get his script? And does it change much? We will end up  
> maintaining 2 versions of his script. I would much prefer that he  
> maintains it and just checks when he needs to do the locking. It's a  
> harmless addition to his code.
> 
> >
> > 2/ Maybe add an AV scanner auto-detect feature to the 
> installer or the
> > MailScanner main Perl process?  In most cases it's just 
> looking for  
> > the
> > presence of the AV scanner binary (possibly in one of 
> several places).
> > In a few cases you need to run the binary and ask it for its  
> > version to
> > figure out which of several wrappers to use.
> 
> Already done, this is now the default setup I ship.
> 
> Virus Scanners = auto
> 
> >
> > 3/ There's always qpsmtpd/qmail support, but you've indicated in the
> > past that you want someone else to take that on.
> 
> I'm not touching qmail, there are other people doing that.
> 
> -- 
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> 
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> MailScanner thanks transtec Computers for their support.
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: get_phish_sigs
Type: application/octet-stream
Size: 1174 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060531/bec0a00e/get_phish_sigs.obj