Hi all,
I use clamd/clamc via amavisd-new. I have a email alias setup to deliver all
clamd reports to a perl script.
This script counts all the virus's detected and outputs a nice colour graph. Check it
here http://www.myisp.net.au/modules.php?name=Virus_Stats
I am using postfix but I believe it doesn't matter as long as you can deliver to
commands.
I will get a website/howto up tonight for you all. And make the scripts available.
I have a problem with this setup but. Just a small one.
If I leave "Exploit.IFrame" in the signature db then this graph doesnt work properly.
Alot of the latest worms/crap
use IFrame and the perl script only passes the "first" virus clamd reports. Therefore
the graph fills up with hits
for Exploit.IFrame. I have taken this out of the virus.db file and now graphing is
perfect. With the new db format
How can I automate the removal of this one signature or is this bad and I should be
modifying the perl code?
Regards
lunix
-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
