Topic: Clamav update path - pagefault.org or Knudsen?

[mbachmann]

The ClamAV install via yum from pagefault.org is not up to date, the one from Jesper Knudsen is at 0.80, pagefault is at 0.75 for the main engine. Will pagefault come up with a 0.80 yum update script update?

[Mumm-Ra]

I saw in a post yesterday that clam are getting a little peeved about some databases not being up-to-date and are considering blacklisting those with older databases.
http://sourceforge.net/forum/forum.php?forum_id=420492
I was using the pagefault installation but this message prompted me to un-install the pagefault av and install Jespers.
Don't know if this is just scary tactics but it worked for me.
Had no problems with the pagefault install other than this though.  A top job.

[ainigma32]

I had the same experience. See also http://forums.contribs.org/index.php?topic=24770.0

Using custom templates you can configure Clamav the way the it should be and still use the admin panel.

[Mumm-Ra]

That was the post I was looking for.

Not getting any of the problems suggested in that post though.  I run the updates every 2 hours against a server in the UK.

Looks like Jesper has it sorted.

[ainigma32]

I was wondering if you could check your freshclam.conf file for the DNSDatabaseInfo directive. It's not in there by default (which is probably an oversight by the Clamav people   ) but it should be there to use the DNS-method of checking for a new virus signature file. I guess the old way used to much bandwidth and now the Clamav people are getting nervous and are threatening users with a blacklist.

[Mumm-Ra]

From my freshclam.conf file.

Code: [Select]

# The main database mirror is database.clamav.net (this is a round-robin
# DNS that points to many mirrors on the world) and in most cases you
# SHOULD NOT change it.
DNSDatabaseInfo current.cvd.clamav.net
DatabaseMirror db.uk.clamav.net
DatabaseMirror database.clamav.net

This was from the straight install from Jesper

[chris burnat]

We came across the same issue a while back.  Using dungog antivirus + dansguardian with virus scanning for http traffic - a must for organisations with a lot of yahoo mail users, We run updates on the hour.  We are blocking anything up to 50 virus a day just on http.  Clam started to complain bitterly about an immediate need to upgrade - second time this year. Thankfully, Stephen sorted out clamav 0.80 and we are back on the road.  I guess it is a small price to pay in the end, clam is rock solid.

[ainigma32]

Just to set the record straight: as it turns out the Clamav people didn't forget the DNSDatabaseInfo directive. They just didn't want to overwrite the exisiting setup. See also: https://sourceforge.net/forum/forum.php?thread_id=1174786&forum_id=420492

[slicknic]

What's the best way of uninstalling the Pagefault.org Clam AV and using Clam 0.8 as discussed above. DO I just rpm -e the e-smith-antivirus RPM or do I do it using yum. If so - how?

Thanks
Nick

[Mumm-Ra]

I ran rpm -e e-smith etc
Just as you suggested.
If you actually run Jesper's script it tells you exactly what to remove.

[mbachmann]

Thanks folks. I have read the other discussion "Clamav config not up to standard" but was somehow discouraged to throw my ClamAV updt. question in.

Someway i hoped a pagefault guy would give an answer.

Additionally i've searched info if someone moved from pagefault to Knudsen, how it wents and what to uninstall. Seems like it went flawlessly for Mumm-Ra?

Knudsen script states to rpm -e e-smith-antivirus-6.0.4-02dc on my machine.

...some time later...  i gave it a try, uninstalled pagefaults, installed Knudsens, got the
ERROR: daily.cvd not found on remote server
ERROR: Can't download daily.cvd from 67.159.6.26 and fixed it with info from some other thread. There i go.

[wellsi]

After upgrading I now often get emails from cron complaining that freshclam couldn't update daily.cvd. I'm guessing that this is just down to network conditions as it eventually suceeds - but it is a little worrying.

Should I just pipe the output to /dev/null or is there a better solution?

ClamAV update process started at Fri Nov 19 10:17:00 2004
main.cvd is up to date (version: 27, sigs: 23982, f-level: 2, builder: tomek)
ERROR: Error while reading database from db.uk.clamav.net
ERROR: Can't download daily.cvd from 68.142.86.21
--------------------------------------
ClamAV update process started at Fri Nov 19 12:17:00 2004
main.cvd is up to date (version: 27, sigs: 23982, f-level: 2, builder: tomek)
ERROR: Error while reading database from db.uk.clamav.net
ERROR: Can't download daily.cvd from 193.19.98.136
--------------------------------------
ClamAV update process started at Fri Nov 19 14:17:01 2004
main.cvd is up to date (version: 27, sigs: 23982, f-level: 2, builder: tomek)
daily.cvd updated (version: 594, sigs: 3057, f-level: 3, builder: diego)
Database updated (27039 signatures) from db.uk.clamav.net (195.92.99.99).
Clamd successfully notified about the update.

[CheahCH]

Anyone tested these (from pagefault) ?
http://www.pagefault.org/code/e-smith/antivirus/6.0.1.tst/i386/clamav-es-0.80-es01.i386.rpm
http://www.pagefault.org/code/e-smith/antivirus/6.0.1.tst/i386/clamav-es-libs-0.80-es01.i386.rpm

[mbachmann]

No, but now they come up with a newer version.

[CheahCH]

Just a note

28th November 2004 - PageFault released the long awaited Clam Antivirus for SME (clamav-es 0.80)
and e-smith antivirus (e-smith-antivirus 6.0.4-6dc) packages