<!doctype html public "-//w3c//dtd html 4.0 transitional//en">
<html>
<body text="#400040" bgcolor="#FFFFFF" link="#FF0000" vlink="#551A8B" alink="#FFFFFF">
Well, neither of my virus definitions were being updated on my MailScanner
4.23-9 system. Not a crisis, since there aren't any users on there yet,
but I want to get it working so I can start the switch early next week.
<p>I have the cron job running that the RPM installed, and it's sending
me mail every hour saying that it worked. It lies.
<p>Based on Miguel's post below, the clamav database is now being updated,
although it wasn't for the first week. As far as I can tell, there is no
difference in the mail whether it does anything or not.
<p>On the same machine, where the cron job is telling me every hour that
both clamav and f-prot were updated, my f-prot definitions look like this
(edited to eliminate the non-definition files):
<br>
<blockquote TYPE=CITE>[root@vanquish MailScanner]# ls -l /usr/local/f-prot/
<br>total 3464
<br>-rw-r--r-- 1 root root
286 Aug 23 23:31 MACRO.ASC
<br>-rw-r--r-- 1 root root
479225 Aug 23 23:31 MACRO.DEF
<br>-rw-r--r-- 1 root root
295 Aug 23 23:31 SIGN2.ASC
<br>-rw-r--r-- 1 root root
853556 Aug 23 23:31 SIGN2.DEF
<br>-rw-r--r-- 1 root root
295 Aug 23 23:31 SIGN.ASC
<br>-rw-r--r-- 1 root root
1084992 Aug 23 23:31 SIGN.DEF
<br> </blockquote>
The current MACRO files are from the 25th, the SIGN files are from the
29th, yet every hour root gets this mail:
<blockquote TYPE=CITE>
<pre>/etc/cron.hourly/update_virus_scanners:
Found clamav installed
Updating clamav
Found f-prot installed
Updating f-prot</pre>
</blockquote>
<p><br>Should I expect f-prot to suddenly start working next? And will
it someday decide to stop again and embarrass me? This is very nervous-making.
<p>Van
<br>
<p>Miguel Koren wrote:
<blockquote TYPE=CITE>Kevin;
<p>You're absolutely right, I see that it's trying an update every
<br>hour and the last time it succeeded checks with the db date:
<p>Aug 28 17:01:06 rivendell ClamAV-autoupdate[29579]: ClamAV updated
<p>So, the conclusion I come to from this experience is that it's best
for
<br>Mailscanner to start it. I use MS 4.22-5 (Clamav 0.60). Is the longer
time
<br>out fix in 4-22 or 4-23?
<p>Someone mentioned html in the mails. Sorry about that. I suppose the
mail
<br>client decided on it's own when I pasted the db date from the Clamav
site.
<p>Miguel
<p>On Fri, 29 Aug 2003, Kevin Spicer wrote:
<p>> On Fri, 2003-08-29 at 21:41, Miguel Koren O'Brien de Lacy wrote: I
have
<br>> >an update to this situation. I checked the actual db files (on 3
<br>> >servers):
<br>>
<br>> >-rw-r--r-- 1 clamav clamav
1319031 Aug 26 14:09 viruses.db
<br>> >-rw-r--r-- 1 clamav clamav
20802 Aug 28 17:01 viruses.db2
<br>>
<br>> >and I see that I do have the latest db, it's just not logged.
<br>>
<br>> Are you sure that MailScanner isn't running the updates too (the
rpm
<br>> version does by default). It should log the fact to your maillog.
<p>--
<br>Esta mensagem foi verificada pelo sistema de antivírus e
<br> acredita-se estar livre de perigo.</blockquote>
--
<br>----------------------------------------------------------
<br>Sign up now for Quotes of the Day, a handful of quotations
<br>on a theme delivered every morning.
<br>Enlightenment! Daily, for free!
<br><A HREF="mailto:twisted@whidbey.com?subject=Subscribe_QOTD">mailto:twisted@whidbey.com?subject=Subscribe_QOTD</A>
<p>For web hosting and maintenance,
<br>visit Van's home page: <A HREF="http://www.domainvanhorn.com/van/">http://www.domainvanhorn.com/van/</A>
<br>----------------------------------------------------------
<br>
</body>
</html>