Clam update problems

[Kevin Kobb]

Yes, MBL_303159 was the one I seemed to be seeing and I had a local.ign2
that I added it too. I hadn't heard of a ignoresigs.ign2 file before, so
I assume they are equivalent?

Thanks.

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Steve
Basford
Sent: Tuesday, August 07, 2012 2:39 PM
To: MailScanner discussion
Subject: Re: Clam update problems


> Has anybody been having problems with ClamAV updates that came out
> today?
>
> I started getting a bunch of false positives and errors this morning,
> and finally had turn of virus scanning in MailScanner.conf to get
> messages to flow.

If you are using unofficial sigs...

Just had a report that MBL_303159 is giving mass FP's (a bad signature)

SO, if you are using MBL ones... something like this will help...

printf > ignoresigs.ign2 MBL_303159
copy the ignoresigs.ign2 file to clamav db directory and restart clamd

As the MBL ones aren't distributed or produced by me, I can't really do
much more that add an updated .ign2 file to the mirrors :(


Cheers,

Steve
Sanesecurity

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!