Re: SaneSecurity

John Rudd wrote the following on 6/27/2007 10:27 AM -0800:
> Bret Miller wrote:
>>> Perhaps more a clamav question, but does anyone use the additional
>>> definitions for clam from SaneSecurity and are they helpful in the
>>> Spam Wars?
>>
>> You're in luck! I just installed them yesterday. Had been meaning to for
>> a while, but things have been too busy to get the script written to
>> update them. So, in less than 24 hours, hit over 1800 spam messages
>> here-- about 1/3 of our spam volume.
>>
>
> I've been told that 3rd party clamav signatures can make clamav
> unstable, because they seem to not be as well tested as the clamav
> signatures. You end up with more than a few cases of "error in 3rd
> party signature file causes clamav to choke and not run".
>
>
> Which is all to say: watch the results of your updates closely.
You should always run a "clamscan -d" on any 3rd party signature files before moving them into your signature database directory. Most, if not all, of the scripts that can be downloaded from the SaneSecurity web site have some kind of signature database testing done before implementing the signature file.

Bill Received on Wed Jun 27 14:48:09 2007