Re: [Clamav-users] Downloading clam virus definition files automatically
All parties are willing and agreeable, and the vendor stands to make some money. I can't imagine that would be a bad thing. I wouldn't underestimate the importance of liability, tho. Uhhh... but then what do you think someone providing such service would be liable for then? Unable to download an update? Or not being updated as soon as an update arrives? Pretty hard one because you connection might be temporarily down, a temporarily routing problem might exist somewhere between you and the server supposed to update your server. If you want to be able to sue someone then why don't you use a product like Symantec Corporate edition, or from any other large vendor? Good luck. Clamav already gives you free support, that's much much more then you can say about Symantec. I have some experience with liability insurances and they will limit what they cover as much as possible. Making an update service pretty expensive.. B. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
B. van Ouwerkerk said: All parties are willing and agreeable, and the vendor stands to make some money. I can't imagine that would be a bad thing. I wouldn't underestimate the importance of liability, tho. Uhhh... but then what do you think someone providing such service would be liable for then? Unable to download an update? Or not being updated as soon as an update arrives? I think such a provider would be liable for very little - but it is very expensive to establish that in court. Law suits are trivial to initiate and we are in a very litigous society. If you have 10,000 customers you can bet at least one of them will levy a suit against you for some perceived affront and you are out of pocket without some kind of insurance. Pretty hard one because you connection might be temporarily down, a temporarily routing problem might exist somewhere between you and the server supposed to update your server. Tell it to the judge. Ka-ching! If you want to be able to sue someone then why don't you use a product like Symantec Corporate edition, or from any other large vendor? I don't want to sue someone - I just like being protected against those who do, and there are a lot of them out there. I have some experience with liability insurances and they will limit what they cover as much as possible. Making an update service pretty expensive.. Imagine the expense of having to be represented in court 5 or 10 times a year. dp --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
If you want to be able to sue someone then why don't you use a product like Symantec Corporate edition, or from any other large vendor? I don't want to sue someone - I just like being protected against those who do, and there are a lot of them out there. That's why you pay so much for insurance. I have some experience with liability insurances and they will limit what they cover as much as possible. Making an update service pretty expensive.. Imagine the expense of having to be represented in court 5 or 10 times a year. Yeah, and how much more expensive any update service would get to cover the additional cost. B. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Downloading clam virus definition files automatically
Uhhh... but then what do you think someone providing such service would be liable for then? Unable to download an update? Or not being updated as soon as an update arrives? Pretty hard one because you connection might be temporarily down, a temporarily routing problem might exist somewhere between you and the server supposed to update your server. BigCorp contracts with you, ClamAVUpdates, for X amount of money per month for virus updates. ClamAVUpdates.com goes down for twenty minutes. During that twenty minutes, a new virus comes out, and BigCorp gets infected with it. BigCorp then turns around and sues ClamAVUpdates for not fufilling their end of the contract. Yes, said contract probably included the standard 'best effort' clauses, or maybe it's not even your fault; but this is an important point, so I'm going to put it in it's own paragraph. You're still going to wind up in court. Court is expensive. So, liability insurance. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Downloading clam virus definition files automatically
I think such a provider would be liable for very little - but it is very expensive to establish that in court. Law suits are trivial to initiate and we are in a very litigous society. If you have 10,000 customers you can bet at least one of them will levy a suit against you for some perceived affront and you are out of pocket without some kind of insurance. Think we're blowing things out of proproation and way off topic here... This is ClammAV not business 101... Liability insurance doesn't PREVENT people from suing you. It covers SPECIFIED perils if people do, but still requires you to defend yourself in the suit - it kicks in to pay legal costs or settle if you lose... Having a fat liability policy can also make you a target. And a waiver, SLA or specific contract limiting liability can close off many of these threats. m/ --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Fajar A. Nugraha wrote: Dennis Peterson wrote: The ClamAV vendor can offer a push of the AV patterns to paying customers with special needs. That way you will receive the updates as quickly as do the mirrors and the vendor recovers some of the cost of maintaining ClamAV. Eh? Really? This is something new :) Could be - why not? All it takes is need and that sure as hell is out here. dp --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Tue, 24 Aug 2004, Dennis Peterson wrote: ; Fajar A. Nugraha wrote: ; Dennis Peterson wrote: ; ; The ClamAV ; vendor can offer a push of the AV patterns to paying customers with ; special needs. That way you will receive the updates as quickly as do the ; mirrors and the vendor recovers some of the cost of maintaining ClamAV. ; ; Eh? Really? This is something new :) ; ; Could be - why not? All it takes is need and that sure as hell is out here. Or, how about a subscription only (i.e. pay for) mirror which people can query every five minutes if they like ? This has the advantage that users who require this don't have to do anything special (like set up an rsync server), just change the mirror they use and the interval that freshclam runs. I'd be interested in running one of these if the database team would be willing to push updates out to a private mirror. (A percentage of the revenue generated would then be fed back into the ClamAV project!) A. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Andy Fiddaman wrote: On Tue, 24 Aug 2004, Dennis Peterson wrote: ; The ClamAV ; vendor can offer a push of the AV patterns to paying customers with ; special needs. That way you will receive the updates as quickly as do the ; mirrors and the vendor recovers some of the cost of maintaining ClamAV. ; Or, how about a subscription only (i.e. pay for) mirror which people can query every five minutes if they like ? Note that although you shouldn't, you CAN query any official mirror every minute if you want :) No mirror that I know of is able to prevent that. Yet. So I would pay for something I can get for free because, uh, because I'm generous? No, that's not it ... :) --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Or, how about a subscription only (i.e. pay for) mirror which people can query every five minutes if they like ? This has the advantage that users who require this don't have to do anything special (like set up an rsync server), just change the mirror they use and the interval that freshclam runs. I'd be interested in running one of these if the database team would be willing to push updates out to a private mirror. (A percentage of the revenue generated would then be fed back into the ClamAV project!) A. A little question: what would ClamAV offer as good from other commercial AVs if it would be neccesary to pay for that kind of checks? Greetings, Julio Canto --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Wednesday 25 Aug 2004 12:09, Andy Fiddaman wrote: I'd be interested in running one of these if the database team would be willing to push updates out to a private mirror. (A percentage of the revenue generated would then be fed back into the ClamAV project!) Any reason why that percentage should be less than 100? A. -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Downloading clam virus definition files automatically
Any reason why that percentage should be less than 100? Cost of bandwidth, cost of equipment, and cost of administrating the purchase/access system? --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Downloading clam virus definition files automatically
On Wed, 25 Aug 2004, Shayne Lebrun wrote: ; Any reason why that percentage should be less than 100? ; ; Cost of bandwidth, cost of equipment, and cost of administrating the ; purchase/access system? That about covers it. To be worth anything, the mirror farm would have to be able to support simultaneous download of main.cvd to all subscribers. If users can query every 5 minutes, the statistical multiplexing which the existing mirrors rely on to spread the load doesn't occur. While I don't mind providing some of my server time and bandwidth free of charge to the project*, this type of service would require some money putting back into it for extra equipment, rack space bandwidth. * I did look at setting up a mirror until I saw the current bandwidth requirements (we have multiple fast connections but pay for excess bandwidth) A. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Julio Canto wrote: Or, how about a subscription only (i.e. pay for) mirror which people can query every five minutes if they like ? This has the advantage that users who require this don't have to do anything special (like set up an rsync server), just change the mirror they use and the interval that freshclam runs. I'd be interested in running one of these if the database team would be willing to push updates out to a private mirror. (A percentage of the revenue generated would then be fed back into the ClamAV project!) A. A little question: what would ClamAV offer as good from other commercial AVs if it would be neccesary to pay for that kind of checks? Greetings, Julio Canto For some people that service by itself is worth paying for - whether enough people feel that way to make a profit remains to be seen. That's the beauty of running a business - no guarantees, just opportunity. It certainly can generate enough income to at least offset some costs. The question you should ask is: is it realistic to assume that volunteers will allow their systems to be slammed by rude people who are impatiently polling them for updates that don't exist, and the ensuing dogpile for the update when it becomes available? The answer is no, of course. A for-fee system is a nice alternative to nothing. example: irh.com - Hawaiian music from Kailua This will go away if enough people don't reach into their pockets. I can see the same for ClamAV. Besides - I'd like to contribute without screwing with the Affero stuff. dp --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Or, how about a subscription only (i.e. pay for) mirror which people can query every five minutes if they like ? Note that although you shouldn't, you CAN query any official mirror every minute if you want :) No mirror that I know of is able to prevent that. Yet. iptables/netfilter :-) So I would pay for something I can get for free because, uh, because I'm generous? No, that's not it ... :) You would pay for the bandwith and speed someone is willing to give you so you can query a mirror every x minutes and get the latest signatures.. How important is it? Don't really know. If a virus is in the wild for over 24 hours IMO waiting another hour doesn't really matter that much.. If I would know enough ppl who would be willing to pay for it I would be more then happy to offer both a public official mirror and a private mirror. A public mirror will most likely happen at some point anyway.. B. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Downloading clam virus definition files automatically
Any reason why that percentage should be less than 100? Cost of bandwidth, cost of equipment, and cost of administrating the purchase/access system? Welcome to the area of open source... --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Shayne Lebrun wrote: Any reason why that percentage should be less than 100? Cost of bandwidth, cost of equipment, and cost of administrating the purchase/access system? And liability insurance. dp --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Nigel Horne wrote: On Wednesday 25 Aug 2004 12:09, Andy Fiddaman wrote: I'd be interested in running one of these if the database team would be willing to push updates out to a private mirror. (A percentage of the revenue generated would then be fed back into the ClamAV project!) Any reason why that percentage should be less than 100? A. The total product is improved when all participants are able to recover or offset their costs in supporting the product. I see nothing wrong, for example, with me paying ClamAV an agreed upon fee to push updates to me immediately when they are available. As a franchisee it is now my option to try to recover my costs and I may choose to do so by advertising a push service for a fee in addition to offering a free polling mirror to any *non-abusers*. I may even offer other services such as installation design and trouble-shooting. The result is the best possible service to those who have the need and are willing to pay a small amount for it and for those who wish a free but lower grade service. As someone who watches days go by without seeing new pattern files for my TrendMicro AV systems (which seems to refute my point above), I am more than impressed by the volume of updates that come from ClamAV. I'd very much like that to continue. Just so everyone understands, there are people who are already paying for this service. Every volunteer is out of pocket for their effort as indicated here: http://www.clamav.net/donate.html I can't imagine they will all continue paying out of pocket, particularly if the service they provide is abused by people who craft clever scripts in a me first manner meant to circumvent the as desired usage of the service. When volunteers come and go you have a marginally stabile system. BTW, in my reading of all the docs and online chat there is an acceptable use policy implied, but it really should be codified and agreed to by the users. dp --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Dennis Peterson wrote: Shayne Lebrun wrote: Any reason why that percentage should be less than 100? Cost of bandwidth, cost of equipment, and cost of administrating the purchase/access system? And liability insurance. Hmm ... which makes me wonder. Say ... 1) I host an official public mirror, which makes me able to obtain updates immediately 2) I sell the immediate push-update service that you talk about 3) I contribute some money that I get back to clamav 4) I setup atomated firewall system which automagically blocks non-paying users which connects to my server too often (perhaps in less 30 minutes interval). I wonder if it's acceptable in terms of license ? License-wise, (3) might not even be necessary. Do people who provide commercial support form clamav actually contributes some money that they earn? Not all, I think. (4) might be a problem, since it might violate some requirements of becoming a public mirror (the docs doesnt't specifically prevent that though). Regards, Fajar --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Downloading clam virus definition files automatically
Any reason why that percentage should be less than 100? Cost of bandwidth, cost of equipment, and cost of administrating the purchase/access system? Welcome to the area of open source... Open source is all well and good, but bandwidth still costs. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Downloading clam virus definition files automatically
Cost of bandwidth, cost of equipment, and cost of administrating the purchase/access system? And liability insurance. Aye, good point. Especially if you're going to be hoping to sell to corporate clients. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Thu, 26 Aug 2004, Fajar A. Nugraha wrote: 4) I setup atomated firewall system which automagically blocks non-paying users which connects to my server too often (perhaps in less 30 minutes interval). (4) might be a problem, since it might violate some requirements of becoming a public mirror (the docs doesnt't specifically prevent that though). It's a problem for technical reasons also: DNS contains ~10 mirrors, which means I can poll every 5 minutes and on average the mirrors will individually only see requests every 50 minutes, making the individual mirrors not realize I'm being a jerk. If anyone can think of a reasonable way to reduce the bandwidth requirements then I can host a mirror. I've gotten approval to use 10 gig/month, and 20 gig/month might be do-able if I beg. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Fajar A. Nugraha wrote: Dennis Peterson wrote: Shayne Lebrun wrote: Any reason why that percentage should be less than 100? Cost of bandwidth, cost of equipment, and cost of administrating the purchase/access system? And liability insurance. Hmm ... which makes me wonder. Say ... 1) I host an official public mirror, which makes me able to obtain updates immediately 2) I sell the immediate push-update service that you talk about 3) I contribute some money that I get back to clamav 4) I setup atomated firewall system which automagically blocks non-paying users which connects to my server too often (perhaps in less 30 minutes interval). I wonder if it's acceptable in terms of license ? License-wise, (3) might not even be necessary. Do people who provide commercial support form clamav actually contributes some money that they earn? Not all, I think. (4) might be a problem, since it might violate some requirements of becoming a public mirror (the docs doesnt't specifically prevent that though). Regards, Fajar All parties are willing and agreeable, and the vendor stands to make some money. I can't imagine that would be a bad thing. I wouldn't underestimate the importance of liability, tho. dp --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Thank you for the explanation (looks like sometines it is difficult to find a normal one without being called stupid or something). Don't let this get you down though. Granted, too frequent checks could give mirrors problems. However, technically there is nothing that prevents you from writing your own scripts to check updates every minute. In fact, recent devel version of freshclam seems to remove limitation on number of checks if you enable DNSDatabaseInfo. Although not recommended, you could now run freshclam as daemon and set it to check for updates, say ... 240 times a day, no additional script necessary. It is better that you bring that idea here, so that others may provide you with ideas how to achieve what you want with as little load as possible to clamav infrastructure. Regards, Fajar Well, the reason why I have that cheking rate is because I've ClamAV integrated in a multi-engine antivirus service called VirusTotal (www.virustotal.com), and to keep av signatures fully updated is one of the most important things to keep in mind. This is mostly because we pretend to offer the 'best' of that engines, and because from time to time we publish information of when was detected new viruses so people can compare reaction times of different AV vendors (12 are participating now). I have to say that I have been positivelly surprised more than once when I've dome that tests, as clam were usually one of the first ones to detect new viruses (in the field of the ones who doesn't have heuristic features). Of course I'm open to any suggestion of how to keep that signatures fully updated using as less resources as neccesary, and trying to understand this AV as good as I can is the reason why I joined and follow this list. Greetings Julio Canto --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Dennis Peterson wrote: The ClamAV vendor can offer a push of the AV patterns to paying customers with special needs. That way you will receive the updates as quickly as do the mirrors and the vendor recovers some of the cost of maintaining ClamAV. Eh? Really? This is something new :) --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Thanks Julio Canto. Thats what i have to do. Hello D J Fan I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? On Fri, 20 Aug 2004 08:35:56 +0200, Julio Canto [EMAIL PROTECTED] wrote: Phil Ershler wrote: Every 10 minutes is much to often. There was a thread about this issue just a while ago. The consensus was 1 to 4 hours and not exactly on the hour. If everybody ran freshclam every 10 minutes, the server would croak. Phil For the shake of reducing the 'unprotection window', every 10 minutes is a good time. It takes a little resources to check for new signatures (basically a GET to an HTTP site should not make croack one of the mirrors)... Anyway, I'm not using freshclam but a python script. Greetings, Julio Canto Hispasec Sistemas --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Rajanikanth P wrote: Thanks Julio Canto. Thats what i have to do. Hello D J Fan I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? On Fri, 20 Aug 2004 08:35:56 +0200, Julio Canto [EMAIL PROTECTED] wrote: Phil Ershler wrote: Every 10 minutes is much to often. There was a thread about this issue just a while ago. The consensus was 1 to 4 hours and not exactly on the hour. If everybody ran freshclam every 10 minutes, the server would croak. Phil For the shake of reducing the 'unprotection window', every 10 minutes is a good time. It takes a little resources to check for new signatures(basically a GET to an HTTP site should not make croack one of the mirrors)... Anyway, I'm not using freshclam but a python script. Greetings, Julio Canto Hispasec Sistemas By the time the signature is released, you may already have had cartloads passing through your server. Another hour won't make a vast amount of difference. You should not be reliant on one method of detecting virii, pure and simple. If the AV software is your only means of ingress detection, your buggered anyway. Matt --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Mon, 23 Aug 2004 at 18:26:47 +0530, Rajanikanth P wrote: I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server No use? You are exaggerating. Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? No. P.S. Please stop top-posting. http://www.xs4all.nl/~hanb/documents/quotingguide.html http://www.netmeister.org/news/learn2quote.html -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Rajanikanth P said: Thanks Julio Canto. Thats what i have to do. Hello D J Fan I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. dp --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
seems to work fine for us tony - Original Message - From: Dennis Peterson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, August 23, 2004 4:35 PM Subject: Re: [Clamav-users] Downloading clam virus definition files automatically Rajanikanth P said: Thanks Julio Canto. Thats what i have to do. Hello D J Fan I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. dp --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Quoting Dennis Peterson [EMAIL PROTECTED]: Rajanikanth P said: Thanks Julio Canto. Thats what i have to do. Hello D J Fan I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server After it taking hours to receive virus sample, inspect, generate signature, test, and finally distribute, if you dont then receive the signature within the next 10 minutes its now useless to you? If you absolutely must have the signature right now, why not generate it yourself? Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? So you want virus protection, instant new outbreak detection, your own personal freshclam that hits multiple servers every 10 minutes AND you want it all for free. I see. Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. Indeed. Jim --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. dp Are you still sugesting that one HTTP Get request every 10 minutes would crash all the signature mirrors of Clam all over the world? Excuse me if you don't mean that, English is not my native tongue. Greetings, Julio Canto --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Monday 23 August 2004 11:14 am, ahellary wrote: seems to work fine for us I really hope the mirrors take note of your ip and just block people like you.. It shows great ignorance when you really think this is how you need to run your servers, or home computer.. Jeff -- === Jabber: tradergt@(smelser.org|jabber.org) Quote: Error: Remove disk, spit on it, insert disk and retry. === pgpHxkiFJyjp3.pgp Description: PGP signature
Re: [Clamav-users] Downloading clam virus definition files automatically
On Monday 23 August 2004 12:21 pm, Julio Canto wrote: Are you still sugesting that one HTTP Get request every 10 minutes would crash all the signature mirrors of Clam all over the world? Excuse me if you don't mean that, English is not my native tongue. Obviously looking at the big picture isnt your native tounge either.. One person, or even 20 doing it, isnt probably a big deal.. Lets talk 1000´s, or even 10,000 hits per 10 minutes.. Someone here has the numbers.. When a update happens, now you have everyone downloading it within a 10 minute period.. Thats to much.. You need to really think about ALL the issues, not just a head check. Jeff -- === Jabber: tradergt@(smelser.org|jabber.org) Quote: But you can sure get nothing for something! === pgpJx6u3yGu1T.pgp Description: PGP signature
Re: [Clamav-users] Downloading clam virus definition files automatically
Julio Canto wanted us to know: Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. Are you still sugesting that one HTTP Get request every 10 minutes would crash all the signature mirrors of Clam all over the world? Excuse me if you don't mean that, English is not my native tongue. Not one, no. How about 1000 people doing this? How about 1? More? -- Regards... Todd We should not be building surveillance technology into standards. Law enforcement was not supposed to be easy. Where it is easy, it's called a police state. -- Jeff Schiller on NANOG Linux kernel 2.6.3-15mdkenterprise 2 users, load average: 0.11, 0.07, 0.02 --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Mon, 23 Aug 2004, Julio Canto wrote: Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. dp Are you still sugesting that one HTTP Get request every 10 minutes would crash all the signature mirrors of Clam all over the world? Excuse me if you don't mean that, English is not my native tongue. Yes, that's what we're saying. You seem to be forgetting that there are thousands of machines that use ClamAV. If you really want updates instantly, there *is* a solution. Volunteer to run a mirror. All mirrors are given updates within 2 minutes. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Downloading clam virus definition files automatically
If you really want updates instantly, there *is* a solution. Volunteer to run a mirror. All mirrors are given updates within 2 minutes. Damian Menscher Joining this thread a little late - sorry... Then we get back to the level of committment required to do that... With things as they are now, the 100GB / month (iirc) and massive number of hits is too big for all but larger organizations to commit to - and they normally often have politics involved that make such a decision more than one sysop can make (unless he's not worried about his job)... I for one would love to set up a mirror... if it was 10GB / 20GB / maybe even 30GB... but 100 and growing is a little too much of an unknown for me. I wouldn't want to opt in, and then have to opt out due to unanticipated and growing load... I've seen the notes about the new cap on daily sizes, maybe that will reduce download size... or maybe at some point a multi levle approach will be used... (main, monthly, daily, etc...) or something through the setup of the DNS that could allow people to volunteer to mirror at a second tier with some fraction of main-mirror bandwidth. Then we could get more mirrors, and reduce the load on each. Already the DNS system will eliminate downloads / connections to the mirrors if the version hasn't changed - right? So eventually we should be able to query more often. m/ --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Aug 20, 2004, at 7:21 PM, [EMAIL PROTECTED] wrote: Rajanikanth P wrote: Hello D.J. Fan, But i have a problem here. Assume that clam updates are published at 6:10 Pm. I check for new updates at 6:05 so the next time i gonna check is at 7:05 it just means that after 55 mins i got the updates. And within this 55 minutes thousands and thousands of say ..a worm which is in wild arrives to my mailserver and clam does not detect it it passes out what do i do ? This is where phone-tree solutions become interesting - the first person to hear something calls the head of the phone tree. They call five pre-set people. Each of those people calls five more people. Etc., etc. Get together with five other organizations that use ClamAV. Each of you check at one of :05, :15, ... :55. If any one of you realizes that there's a new version, tell the other four. Viral antivirus propagation? --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Fajar A. Nugraha wrote: Yes. There's nothing that prevent you running freshclam (or whatever your updater will be) every minute or so. However, with the default check time of one hour (default for RPM packages, that is), mirrors already uses lots of bandwitdh (over 100 GB a month each), so please consider that when you're running virus db updater ... Anyway, I'm not using freshclam but a python script. TK said newer versions of freshclam will use DNS to determine db versions. For now, you could either : - get first few bytes of main.cvd and daily.cvd to determine current version, or - use my unofficial DNS tracker to determine virus database version. [EMAIL PROTECTED] fajar]$ host -t txt version.daily.db.clamav.or.id version.daily.db.clamav.or.id text 462 Please see my previous post to see how I setup and update daily.db.clamav.or.id. What I'm doing now is something simpler: I just check the dates of files published on one of the mirrors with the database files (http://clamav.fisher.hu/database/ for instance). If I detect if is newer than the last one I downloaded, then I get the files, and that's all. That way I avoid having to 'touch' the files themselves. Probably it ain't the most elegant way to do so, but I bet it is has a quite low comsumption rate of resources of Clam av servers online :) Greetings, Julio Canto Hispasec Sistemas --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Nigel Horne wrote: Is it possible to use HEAD to reduce load? I believe it already uses RANGE, so traffic wise the load is greatly reduced. However, if every user decides to set checks every minutes the bottleneck will be in maximum connection. This will not happen if version checks is done via DNS. In my oppinion, the best way to reduce mirror traffic is by implementing incremental updates. Something that hasn't make its way to freshclam (yet ...) Regards, Fajar --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Julio Canto wrote: Fajar A. Nugraha wrote: Yes. There's nothing that prevent you running freshclam (or whatever your updater will be) every minute or so. However, with the default check time of one hour (default for RPM packages, that is), mirrors already uses lots of bandwitdh (over 100 GB a month each), so please consider that when you're running virus db updater ... Anyway, I'm not using freshclam but a python script. TK said newer versions of freshclam will use DNS to determine db versions. For now, you could either : - get first few bytes of main.cvd and daily.cvd to determine current version, or - use my unofficial DNS tracker to determine virus database version. [EMAIL PROTECTED] fajar]$ host -t txt version.daily.db.clamav.or.id version.daily.db.clamav.or.id text 462 Please see my previous post to see how I setup and update daily.db.clamav.or.id. What I'm doing now is something simpler: I just check the dates of files published on one of the mirrors with the database files (http://clamav.fisher.hu/database/ for instance). If I detect if is newer than the last one I downloaded, then I get the files, and that's all. That way I avoid having to 'touch' the files themselves. Probably it ain't the most elegant way to do so, but I bet it is has a quite low comsumption rate of resources of Clam av servers online :) Greetings, Julio Canto Hispasec Sistemas As I have several servers here, I run a local mirror here using wget -m, which does essentially the same: check modification time via HEAD request. This doesn't hurt performance on the server. All local machines run freshclam as daemon, with 48 checks per day (last time I checked the maximum value was 50). Thomas --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
At 02:13 AM 8/20/2004, Fajar A. Nugraha wrote: Nigel Horne wrote: Is it possible to use HEAD to reduce load? I believe it already uses RANGE, so traffic wise the load is greatly reduced. Wouldn't it be more efficient to use Etags and/or If-Modified-Since and let the server issue a 304 Not Modified response? HTTP has built-in methods to help clients avoid downloading duplicate files. (In theory, the server could issue this response without even opening the file.) Pardon me if this has been covered in one of the recent threads -- after a while they got so long that I gave up reading them. Kelson Vibber SpeedGate Communications www.speed.net --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
sudo crontab -e add at the end */10 * * * * /path/to/freshclam --quiet NO! Once an hour is reasonable, but not 6 times an hour! I agree, I think a better way is to add a file to the /etc/cron.d directory with the contents of the file: # m h dom mon dow user command 11 */2 * * * clamav /path/to/freshclam --quiet with clamav being the user the program is configured to run under. (pick a random number between 1 and 59 for the time - don't use the digit zero) This will run every two hours. For a system with 500+ users, run it every hour. I use this setup on Debian. Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users _ FREE pop-up blocking with the new MSN Toolbar get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/ --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Hello D.J. Fan, But i have a problem here. Assume that clam updates are published at 6:10 Pm. I check for new updates at 6:05 so the next time i gonna check is at 7:05 it just means that after 55 mins i got the updates. And within this 55 minutes thousands and thousands of say ..a worm which is in wild arrives to my mailserver and clam does not detect it it passes out what do i do ? On Fri, 20 Aug 2004 16:02:30 -0600, D.J. Fan [EMAIL PROTECTED] wrote: sudo crontab -e add at the end */10 * * * * /path/to/freshclam --quiet NO! Once an hour is reasonable, but not 6 times an hour! I agree, I think a better way is to add a file to the /etc/cron.d directory with the contents of the file: # m h dom mon dow user command 11 */2 * * * clamav /path/to/freshclam --quiet with clamav being the user the program is configured to run under. (pick a random number between 1 and 59 for the time - don't use the digit zero) This will run every two hours. For a system with 500+ users, run it every hour. I use this setup on Debian. Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users _ FREE pop-up blocking with the new MSN Toolbar get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/ --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
But i have a problem here. Assume that clam updates are published at 6:10 Pm. I check for new updates at 6:05 so the next time i gonna check is at 7:05 it just means that after 55 mins i got the updates. And within this 55 minutes thousands and thousands of say ..a worm which is in wild arrives to my mailserver and clam does not detect it it passes out what do i do ? As far as viruses go, we all have a problem. You could get a virus hours before ANY anti-virus software provider is aware of it. That's just the way it is. I use a total of three different scanners - Trend Micro, Clamav and Norton on the desktop. Do I feel safe? - never. _ Dont just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/ --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Downloading clam virus definition files automatically
Matthew van Eerde wrote:
Rajanikanth P wrote:
Hello D.J. Fan,
But i have a problem here. Assume that clam updates are published at
6:10 Pm. I check for new updates at 6:05 so the next time i gonna
check is at 7:05 it just means that after 55 mins i got the updates.
And within this 55 minutes thousands and thousands of say ..a worm
which is in wild arrives to my mailserver and clam does not
detect it
it passes out what do i do ?
Get together with five other organizations that use ClamAV.
Each of you check at one of :05, :15, ... :55. If any one of
you realizes that there's a new version, tell the other four.
A more practical solution is to do what I plan to do.
Reject anything that is a *known* virus
Accept but quarantine everything that isn't a known virus, but *looks* like a virus
(.exe, .zip, etc.) Have at least a two-hour cooling-off period to give your
definitions a chance to catch up to the virus writers - then rescan before you deliver
it to the recipient.
Pulling false positives out of quarantine is a pain - but much less of a pain than
having to clean up a network-wide infection.
[EMAIL PROTECTED] 805.964.4554 x902
Hispanic Business Inc./HireDiversity.com Software Engineer
perl -emap{y/a-z/l-za-k/;print}shift Jjhi pcdiwtg Ptga wprztg,
---
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Rajanikanth P wanted us to know: I want to write a script/program which checks for clam virus updates man freshclam -- Regards... Todd We should not be building surveillance technology into standards. Law enforcement was not supposed to be easy. Where it is easy, it's called a police state. -- Jeff Schiller on NANOG Linux kernel 2.6.3-15mdkenterprise 2 users, load average: 0.23, 0.10, 0.03 --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Fri, 20 Aug 2004 02:15:51 +0530, Rajanikanth P [EMAIL PROTECTED] wrote: Hello All, I want to write a script/program which checks for clam virus updates every 10 minutes and updates the respective files. Can anybody provide me some information on sites that host clam av definitions and also tell me which is the most efficient and reliable site Thanks in advance. sudo crontab -e add at the end */10 * * * * /path/to/freshclam --quiet -- Steve --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Every 10 minutes is much to often. There was a thread about this issue just a while ago. The consensus was 1 to 4 hours and not exactly on the hour. If everybody ran freshclam every 10 minutes, the server would croak. Phil On Aug 19, 2004, at 5:21 PM, Steven Stern wrote: On Fri, 20 Aug 2004 02:15:51 +0530, Rajanikanth P [EMAIL PROTECTED] wrote: Hello All, I want to write a script/program which checks for clam virus updates every 10 minutes and updates the respective files. Can anybody provide me some information on sites that host clam av definitions and also tell me which is the most efficient and reliable site Thanks in advance. sudo crontab -e add at the end */10 * * * * /path/to/freshclam --quiet -- Steve --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Steven Stern wanted us to know: sudo crontab -e add at the end */10 * * * * /path/to/freshclam --quiet NO! Once an hour is reasonable, but not 6 times an hour! -- Regards... Todd We should not be building surveillance technology into standards. Law enforcement was not supposed to be easy. Where it is easy, it's called a police state. -- Jeff Schiller on NANOG Linux kernel 2.6.3-15mdkenterprise 2 users, load average: 0.00, 0.00, 0.00 --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Thu, 19 Aug 2004 16:41:04 -0700, Todd Lyons [EMAIL PROTECTED] wrote: Steven Stern wanted us to know: NO! Once an hour is reasonable, but not 6 times an hour! I was showing the OP how, not condoning his schedule. I run freshclam on th 17th minute every 4 hours. -- Steve --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
