Scott, Where did you download the rsync for windows?
Mark Reimer IT System Admin American CareSource 972-308-6887 _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, March 26, 2007 9:19 AM To: [email protected] Subject: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br 1. I noticed my clamav's MSRBL Signatures hadn't been updated for a week or so. I t looks like they have moved from ftp access to rsync. Here's what I use to download them now: rsync246 rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-Images.hdb . rsync246 rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-SPAM.ndb . erase c:\clamav-devel\share\clamav\MSRBL-SPAM.ndb copy MSRBL-SPAM.ndb c:\clamav-devel\share\clamav\MSRBL-SPAM.ndb erase c:\clamav-devel\share\clamav\MSRBL-Images.hdb copy MSRBL-Images.hdb c:\clamav-devel\share\clamav\MSRBL-Images.hdb 2. I've found another potential Malware block list with clam-av addons: http://www.malware.com.br/ Here's what I use to download them: wget -O - http://www.malware.com.br/cgi/submit?action=list_clamav > mbl.db wget -O - http://www.malware.com.br/cgi/submit?action=list_clamav_ext > mble.db erase c:\clamav-devel\share\clamav\mbl.db copy mbl.db c:\clamav-devel\share\clamav\mbl.db erase c:\clamav-devel\share\clamav\mble.db copy mbl.db c:\clamav-devel\share\clamav\mble.db 3. I get postmaster notifications of virus activity. I've added these skips for the various clamav addon dbs to postmaster.eml SKIPIFVIRUSNAMEHAS MSRBL-SPAM SKIPIFVIRUSNAMEHAS MSRBL-Images SKIPIFVIRUSNAMEHAS MBL_ SKIPIFVIRUSNAMEHAS Email.Spam SKIPIFVIRUSNAMEHAS Html.Spam SKIPIFVIRUSNAMEHAS Email.Scam SKIPIFVIRUSNAMEHAS Html.Scam SKIPIFVIRUSNAMEHAS Email.Job SKIPIFVIRUSNAMEHAS Html.Job SKIPIFVIRUSNAMEHAS Email.Stk SKIPIFVIRUSNAMEHAS Html.Stk SKIPIFVIRUSNAMEHAS Email.Loan SKIPIFVIRUSNAMEHAS Html.Loan SKIPIFVIRUSNAMEHAS Email.Hdr SKIPIFVIRUSNAMEHAS Email.Dipl SKIPIFVIRUSNAMEHAS Html.Dipl SKIPIFVIRUSNAMEHAS Email.Img SKIPIFVIRUSNAMEHAS Html.Img SKIPIFVIRUSNAMEHAS Email.Bou SKIPIFVIRUSNAMEHAS Html.Bou SKIPIFVIRUSNAMEHAS Html.Phishing SKIPIFVIRUSNAMEHAS Email.Phishing SKIPIFVIRUSNAMEHAS Email.Malware SKIPIFVIRUSNAMEHAS Html.Malware ----------------------------------------------------- Scott Fisher Director of IT Farm Progress Companies 191 S Gary Ave Carol Stream, IL 60188 630-462-2323 This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. Although Farm Progress Companies has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
