Obsolete Releases > SME 8.x Contribs

Ransomware/CTB-Locker ClamAV signature

<< < (3/5) > >>

brianr:

--- Quote from: Stefano on February 18, 2015, 05:29:26 PM ---there are also unofficial clamav signatures, most of them are used to limit spam..
see http://blog.redbranch.net/2010/09/24/enhancing-clamav-with-extra-signatures/

they are available also in rpm package.. I'm using clamav-unofficial-sigs on my server and other 3..

--- End quote ---

Can you give me a link to get that RPM?

guest22:

--- Quote from: brianr on February 23, 2015, 06:47:29 PM ---Can you give me a link to get that RPM?

--- End quote ---

It's available from the epel repository (For SME Server 9 at least)

yum install  clamav-unofficial-sigs --enablerepo=epel

brianr:

--- Quote from: guest22 on February 23, 2015, 07:07:55 PM ---It's available from the epel repository (For SME Server 9 at least)

yum install  clamav-unofficial-sigs --enablerepo=epel

--- End quote ---

thanks - and there for SME8 as well...

Knuddi:
Any good reasons not to use the script which was made/modified for the SME?

http://wiki.contribs.org/Virus:Additional_Signatures

@brianr,
Which other sources of signatures do you use?

Stefano:

--- Quote from: guest22 on February 23, 2015, 07:07:55 PM ---It's available from the epel repository (For SME Server 9 at least)

yum install  clamav-unofficial-sigs --enablerepo=epel

--- End quote ---

yes.. sorry for the delay

you have to manually edit .conf file in /etc/clamav-unofficial-sigs (IIRC)

I'll post my conf asap

@all: please be aware that some rules are very aggressive.. after you enable them, you should keep an open eye on your qpsmtpd log

Navigation

[0] Message Index

[#] Next page

[*] Previous page