[sanesecurity] Re: winnow additions
- From: "Steve Basford" <steveb_clamav@xxxxxxxxxxxxxxxx>
- To: sanesecurity@xxxxxxxxxxxxx
- Date: Tue, 14 Feb 2012 08:14:14 -0000
> Just to let you know. winnow will be adding skull's bofhland signatures to
> the winnow distribution.
>
> bofhland_cracked_URL.ndb, bofhland_malware_URL.ndb and
> bofhland_phishing_URL.ndb will be added to winnow_malware_links.ndb and
> winnow_phish_complete.ndb and winnow_phish_complete_url.ndb.
>
> These are high quality full url signatures for phishing and malware and
> cracked serves that could be serving anything for malware to phish to pill
> and regular spam. Are updated in realtime and purged in real time as well.
Hi Tom,
Just a quick one...
How are you going to add these... just add another letter to the sig
names... eg .bof. ???
I personally would have preferred to download them direct from here...
http://clamav.bofhland.org/
..and pushed the databases to the mirrors... which may make fp reporting
quicker and more direct (clam@xxxxxxxxxxxx) and users know which databases
they are using.
It certainly won't take long to do that.
Cheers,
Steve
Sanesecurity
Other related posts:
