On Mon, May 20, 2002 at 10:30:12AM -0700, Ted Cabeen wrote:
> Has anyone seen problems with updating the virus defs while they're being=

Absolutely - it's a dangerous thing to do.

I download and unpack the new pattern files into a temp dir, create an EICAR
test virus and tell the scanner to scan that file with the new pattern files
(most scanners should allow you to redefine where the pattern files are). If
they are OK, I *MOVE* the pattern files into the live dir. That way the
window for problems is minimized. 

However, that still causes the scanner to fail if it's invoked at the moment
the move occurs. Here I look for updates once every hour, and I get around
one such "clash" per week - so it's easy to do...

However, that just causes Q-S to requeue - nothing really bad happens...

-- 
Cheers

Jason Haar

Information Security Manager
Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to