[sanesecurity] Re: winnow additions

  • From: "Steve Basford" <steveb_clamav@xxxxxxxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Tue, 14 Feb 2012 08:14:14 -0000

> Just to let you know. winnow will be adding skull's bofhland signatures to
> the winnow distribution.
> bofhland_cracked_URL.ndb,  bofhland_malware_URL.ndb and
> bofhland_phishing_URL.ndb will be added to winnow_malware_links.ndb and
> winnow_phish_complete.ndb and winnow_phish_complete_url.ndb.
> These are high quality full url signatures for phishing and malware and
> cracked serves that could be serving anything for malware to phish to pill
> and regular spam. Are updated in realtime and purged in real time as well.
Hi Tom,

Just a quick one...

How are you going to add these... just add another letter to the sig
names... eg .bof. ???

I personally would have preferred to download them direct from here...


..and pushed the databases to the mirrors...  which may make fp reporting
quicker and more direct (clam@xxxxxxxxxxxx) and users know which databases
they are using.

It certainly won't take long to do that.



Other related posts: