> Sorry I forgot the rest, here they are here are the sigs I'm currently using
rsync://rsync.sanesecurity.net/sanesecurity/sanesecurity.ftm rsync://rsync.sanesecurity.net/sanesecurity/sigwhitelist.ign2 rsync://rsync.sanesecurity.net/sanesecurity/junk.ndb rsync://rsync.sanesecurity.net/sanesecurity/jurlbla.ndb rsync://rsync.sanesecurity.net/sanesecurity/lott.ndb rsync://rsync.sanesecurity.net/sanesecurity/phish.ndb rsync://rsync.sanesecurity.net/sanesecurity/rogue.hdb rsync://rsync.sanesecurity.net/sanesecurity/scam.ndb rsync://rsync.sanesecurity.net/sanesecurity/spam.ldb rsync://rsync.sanesecurity.net/sanesecurity/spamimg.hdb rsync://rsync.sanesecurity.net/sanesecurity/spamattach.hdb rsync://rsync.sanesecurity.net/sanesecurity/spear.ndb rsync://rsync.sanesecurity.net/sanesecurity/scamnailer.ndb rsync://rsync.sanesecurity.net/sanesecurity/doppelstern.ndb rsync://rsync.sanesecurity.net/sanesecurity/INetMsg-SpamDomains-2w.ndb rsync://rsync.sanesecurity.net/sanesecurity/winnow_malware.hdb rsync://rsync.sanesecurity.net/sanesecurity/winnow_malware_links.ndb rsync://rsync.sanesecurity.net/sanesecurity/winnow_phish_complete.ndb rsync://rsync.sanesecurity.net/sanesecurity/winnow_spam_complete.ndb rsync://rsync.sanesecurity.net/sanesecurity/winnow.attachments.hdb rsync://rsync.sanesecurity.net/sanesecurity/winnow_extended_malware.hdb http://clamav.securiteinfo.com/honeynet.hdb http://clamav.securiteinfo.com/securiteinfobat.hdb http://clamav.securiteinfo.com/securiteinfodos.hdb http://clamav.securiteinfo.com/securiteinfoelf.hdb http://clamav.securiteinfo.com/securiteinfo.hdb http://clamav.securiteinfo.com/securiteinfohtml.hdb http://clamav.securiteinfo.com/securiteinfooffice.hdb http://clamav.securiteinfo.com/securiteinfopdf.hdb http://clamav.securiteinfo.com/securiteinfosh.hdb as for the "scoring regexp" I gave up with that some time ago since I found I had quite a few false positives, in my case the regexp just contains Safebrowsing=>1.25 Heuristics=>1.25 while all the other lines are commented out (prefixed by "#") also, and since we're at "sanesecurity", I'd recommend running rsync from whatever folder using the following * windows mkdir sane rsync --progress --delete -rt --chmod=a+r "rsync://rsync.sanesecurity.net/sanesecurity/." "./sane/" * linux mkdir sane rsync --progress --delete -rt --chmod=a+r rsync://rsync.sanesecurity.net/sanesecurity/. ./sane/ and then having a look at the "readme.txt" you'll find inside the "sane" folder; it contains infos about the available signatures and the list found here is more up-to-date than the published one (the one on the website) HTH ------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
