Peter van der Does wrote:

clamd / ClamAV version 0.67
freshclam / ClamAV version 0.67



I think Tomasz said 0.70 is coming soon. Personally, I prefer the current snapshot better than 0.67.
See ChangeLog in current CVS snapshot or http://clamav.or.id/snapshot/ChangeLog to see
what has changed. Some of them (especially ArchiveDetectEncrypted) is definitely worth upgrading from 0.67.


We only got a two small problems, we let freshclam check every hour for
updates and it gets them, the problems with it:

Q1.
We have had problems with the databasemirror set as
database.clamav.net. we got the errors:

From the log:
ERROR: Malformed CVD header detected.
ERROR: Can't read main.cvd header from database.clamav.net (ourproxy)
Trying again...



I assume your host (or proxy) is protected by firewall?
database.clamav.net has many mirrors (thus returning lots of IP addresses) which
will not fit on DNS UDP response. Usually it will automatically
switch to TCP, but on some cases (if DNS TCP is disabled, or if you're under firewall)
you can't resolve database.clamav.net host.


After setting it to a real mirror everything went fine. But we prefer
to use the database.clamav.net.



Either allow DNS TCP response (test it with `nslookup database.clamav.net` on your proxy)
or add multiple lines of DatabaseMirror (with different real mirror addresses) on your clamav.conf.


Q2.
I just read the UpdateDB mail:
Submission: 1890
Sender: Dirk Mueller
Submitted virus name: WM97/Outblack-A
Virus name: WM97.Outblack.A
Virus name alias: IRC-Worm.Blackput (kaspersky)
Note: Latest CVS version of ClamAV is required to detect Note: the macro viruses.
Added: Yes


Does this mean our version of clamav doesn't detect macro viruses at
all?


I think so.

If so what other forms of virusses doesn't it detect?



Possibly polimorphic ones. However, remember that if you're using an AV
scanner on mail server, the majority of virus you will encounter is worms
(which ClamAV detects well).

Regards,

Fajar


------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to