2010-05-13 00:35:57 +02:00
|
|
|
clamav-unofficial-sigs provides a shell script to download, verify (GPG) and
|
|
|
|
integrate third-party clamav signatures into the clamav database. These
|
|
|
|
third-party signatures provide valuable spam and malware detection
|
2010-05-12 23:31:59 +02:00
|
|
|
capabilities and make an excellent enhancement to native clamav signatures.
|
|
|
|
|
2010-07-04 09:09:33 +02:00
|
|
|
It is especially useful when running a mailserver with clamav. The best way to
|
|
|
|
update signatures is to set up a cron job.
|
2010-05-13 00:35:57 +02:00
|
|
|
|
|
|
|
Following four sources of signatures are used by default in the config file:
|
|
|
|
|
2010-05-12 23:31:59 +02:00
|
|
|
1) SaneSecurity
|
|
|
|
2) MSRBL (Realtime Blacklists)
|
|
|
|
3) SecuriteInfo
|
|
|
|
4) MalwarePatrol
|
|
|
|
|
2010-05-13 00:35:57 +02:00
|
|
|
These sources are fully tweakable via the config file. Also refer to the
|
|
|
|
documentation included with the package which provides configuration and
|
2010-05-12 23:31:59 +02:00
|
|
|
setup infomation.
|
|
|
|
|
2010-05-13 00:35:57 +02:00
|
|
|
Following are the URLs for each signature source.
|
2010-05-12 23:31:59 +02:00
|
|
|
SaneSecurity: http://www.sanesecurity.com/index.htm
|
|
|
|
SecuriteInfo: http://www.securiteinfo.com/services/clamav_unofficial_malwares_signatures.shtml
|
|
|
|
MSRBL: http://www.msrbl.com/
|
|
|
|
MalwarePatrol: http://www.malware.com.br/
|
|
|
|
|
2010-07-04 09:09:33 +02:00
|
|
|
A sample cron entry is included in the package docs, please make appropriate
|
2010-05-12 23:31:59 +02:00
|
|
|
changes to it and add it to root's crontab.
|
|
|
|
|
2010-07-04 09:09:33 +02:00
|
|
|
If you are using a firewall on your server, you may have to allow rsync
|
|
|
|
traffic as MSRBL sigs are downloaded using rsync.
|