[sanesecurity] Re: SecuriteInfo Sigs
- From: Bill Landry <bill@xxxxxxxxxxx>
- To: sanesecurity@xxxxxxxxxxxxx
- Date: Tue, 24 Apr 2012 13:32:45 -0700
On 4/24/2012 7:54 AM, Arthur Dent wrote:
Hello all,
I have been using Bill's excellent script for so long now I forgot how I
set it up. It *just works*. Recently however I have noticed that I have
been getting a lot of curl failures on the various SecuriteInfo sigs.
Looking at my clamav-unofficial-sigs.conf I notice that I have the
SecuriteInfo downloads set to the (default?) of 4hourly (i.e 6 updates per
day).
Wondering if there was a problem with the SecuriteInfo server I checked
their website. On the front page I noticed to my horror the following
statement:
"Download
WARNING ! DO NOT DOWNLOAD THIS FILE MORE THAN ONCE A DAY. ANY ABUSE =
BANNED IP ADDRESS."
Have I been banned or is there just a problem with the feed? How can I check?
Thanks for any help or suggestions...
Mark
Mark, Arnaud Jacques (the creator and maintainer of the SecuriteInfo
signature databases) is subscribed to this list. Long ago I exchanged
some emails with Arnaud and he was fine with the check interval.
Remember, the check interval only looks for new files, it does not
download anything unless a file has been updated. The warning is about
constantly downloading files that have not changed, not checking and
doing nothing if none of the files has changed.
Besides, everyone that uses my script would be banned if that were the
case. Look elsewhere for the problem.
Regards,
Bill
Other related posts:
