Hi!

5-Янв-2005 18:52 [EMAIL PROTECTED] (Stephen Gran) wrote to
clamav-users@lists.clamav.net:

>> - how ClamAV virus base files are related? For example, Dr.Web contains one
[...]
>>   are newer, than main base.) How builded ClamAV bases and which files/names
>>   used for this?
SG> There is a main.db and a daily.db.  Every so often, signatures from
SG> daily.db are pushed into main.db.

     "Pushed"? Do you mean, that some ClamAV component (which one?)
permanently modifies main.db? How it detects, that it should make another
change to main.db? And how to be sure, that some updates wasn't missed?

>> - how to receive updates (beside online access through internet) for ClamAV
SG> Most of the time the updates are only to daily.db,

     ?

SG> and it is fairly small (175K here).

     175k isn't "fairly small". :) :(

SG> There does not seem to be a way around getting them from the mirrors,
SG> at least at some point in the chain - it would be trivial to fetch,

     "Fetch" from where (without online)? (BTW, updates for my previous
Dr.Web installation I get through email and from their BBS.)

SG> put on some medium, and carry them over to the
SG> machines in question, though, if you prefer that.

     BTW, how ClamAV bases are protected against deception?

>> - (my friend asks) Is there possible to configure downloading/updating bases
>>   through specific places? For example, he updates ClamAV bases on the LAN
>>   server and ClamAV on client machines updates itself from this server? If
>>   this is not possible with built-in tools of ClamAV, how you recommend to
>>   resolve this task?
SG> Yes - have the LAN server update from the regular mirrors, and have all
SG> the other clients update from the LAN server.  Just put up a website,

     Website? Do you mean, that he (friend) should run on his LAN server IIS
(MS Internet Information Service) and be open for attacks?

SG> and put the files in the document root of that server.  Or at least that
SG> is my understanding of the structure of the mirrors - perhaps someone
SG> here who runs one can comment better?


_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to