Results 1 to 4 of 4

Thread: ClamAV newest definition updates

  1. #1
    Join Date
    Dec 2007
    Location
    Stockton, CA
    Posts
    164
    Rep Power
    7

    Default ClamAV newest definition updates

    Hi all,

    How can I check to verify that ClamAV is using the most recent definition updates? I've been having problems with people contracting viruses from spam messages and I'd like to cap this ASAP!

  2. #2
    dijichi2 is offline OpenSource Builder & Moderator
    Join Date
    Oct 2005
    Posts
    1,176
    Rep Power
    12

    Default

    have a look in the freshclam and clamd logs in /opt/zimbra/log. virus signatures should be updated every two hours, i think.

  3. #3
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    Yup 2h is the default for the zimbraVirusDefinitionsUpdateFrequency attribute.

  4. #4
    Join Date
    Dec 2007
    Location
    Stockton, CA
    Posts
    164
    Rep Power
    7

    Default

    I've bumped it down to one hour so I can verify it's properly updating. In the freshclam log file, the first "group" has error messages about not being able to find files:

    --------------------------------------
    freshclam daemon 0.93.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
    ClamAV update process started at Tue Aug 26 10:40:22 2008
    SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
    See the FAQ at [url=http://www.clamav.net/support/faq]Clam AntiVirus[/url] for an explanation.
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Local version: 0.93.1 Recommended version: 0.93.3
    DON'T PANIC! Read [url=http://www.clamav.net/support/faq]Clam AntiVirus[/url]
    main.cld is up to date (version: 47, sigs: 312304, f-level: 31, builder: sven)
    WARNING: getfile: daily-8019.cdiff not found on remote server (IP: 64.246.134.219)
    WARNING: getpatch: Can't download daily-8019.cdiff from db.us.clamav.net
    WARNING: getfile: daily-8019.cdiff not found on remote server (IP: 64.246.134.219)
    WARNING: getpatch: Can't download daily-8019.cdiff from db.us.clamav.net
    WARNING: getfile: daily-8019.cdiff not found on remote server (IP: 168.143.19.95)
    WARNING: getpatch: Can't download daily-8019.cdiff from db.us.clamav.net
    WARNING: Incremental update failed, trying to download daily.cvd
    Downloading daily.cvd [100%]
    daily.cvd updated (version: 8093, sigs: 92341, f-level: 33, builder: ccordes)
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Current functionality level = 31, recommended = 33
    DON'T PANIC! Read [url=http://www.clamav.net/support/faq]Clam AntiVirus[/url]
    Database updated (404645 signatures) from db.us.clamav.net (IP: 207.57.106.31)
    WARNING: Clamd was NOT notified: Can't connect to clamd on 127.0.0.1:3310
    --------------------------------------

    But subsequent entries (there are only two other "groups") report that everything is fine:

    --------------------------------------
    freshclam daemon 0.93.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
    ClamAV update process started at Tue Aug 26 10:40:32 2008
    SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
    See the FAQ at [url=http://www.clamav.net/support/faq]Clam AntiVirus[/url] for an explanation.
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Local version: 0.93.1 Recommended version: 0.93.3
    DON'T PANIC! Read [url=http://www.clamav.net/support/faq]Clam AntiVirus[/url]
    main.cld is up to date (version: 47, sigs: 312304, f-level: 31, builder: sven)
    daily.cvd is up to date (version: 8093, sigs: 92341, f-level: 33, builder: ccordes)
    --------------------------------------
    --------------------------------------
    freshclam daemon 0.93.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
    ClamAV update process started at Tue Aug 26 10:41:48 2008
    SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
    See the FAQ at [url=http://www.clamav.net/support/faq]Clam AntiVirus[/url] for an explanation.
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Local version: 0.93.1 Recommended version: 0.93.3
    DON'T PANIC! Read [url=http://www.clamav.net/support/faq]Clam AntiVirus[/url]
    main.cld is up to date (version: 47, sigs: 312304, f-level: 31, builder: sven)
    daily.cvd is up to date (version: 8093, sigs: 92341, f-level: 33, builder: ccordes)
    --------------------------------------

    So, I think I'm okay. I hope! lol

Similar Threads

  1. zmclamdctl is not running after upgrade
    By Darren in forum Installation
    Replies: 24
    Last Post: 10-10-2008, 10:10 AM
  2. [SOLVED] Howto: Update ClamAV
    By unilogic in forum Administrators
    Replies: 9
    Last Post: 12-12-2007, 05:28 AM
  3. Replies: 2
    Last Post: 07-13-2007, 07:25 AM
  4. Zimbra ClamAV Security Updates?
    By jdell in forum Administrators
    Replies: 13
    Last Post: 03-05-2007, 09:12 AM
  5. Replies: 2
    Last Post: 03-15-2006, 09:37 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •