2
Does ClamAV auto update definitions?
Question asked by Paul White - 6/6/2016 at 1:01 PM
Answered
I have the latest version of smartermail 15 running.  I have enabled clamAV, and its working great.  Catching about dozen virus emails every day now.  Today I got a report from a user that they got a virus in their email, and looked and it looks like ClamAV did not catch this one, though it caught 4 other emails sent from the same user.  My only thought is ClamAV doesn't have a definition to catch this particular virus.  Question is does ClamAV automatically update its definitions, and if so how often?  Or do I need to run some kind of chron job to automatically update it?
WhiteSites.com
Blog.whitesites.com

4 Replies

Reply to Thread
0
Matt Petty Replied
Employee Post Marked As Answer
Yes it does automatically, every 6 hours.
Matt Petty Senior Software Developer SmarterTools Inc. www.smartertools.com
0
Paul White Replied
Thanks Matt,
question could the non detect on a virus be tied to failed connections to ClamAV?
Today I seem to have much higher failed connections than usual.
Example
6/3 21757 Connections, 19 failed
6/4 6563 Connections, 17 failed
6/5 7316 Connections, 9 failed
6/6 6876 Connections, 3883 failed
 
Any idea what would cause so many failed connections?
WhiteSites.com Blog.whitesites.com
0
Matt Petty Replied
Employee Post
Failures happen when it hits and exception or fails to talk to Cyren. There isn't a sure fire way to tell, but that trend in connection failures is odd compared to the rest of the days. Was there a change in traffic or anything?
Matt Petty Senior Software Developer SmarterTools Inc. www.smartertools.com
0
Paul White Replied
No change in traffic, though I get the feeling something was wrong for a short amount of time as the day finished off at 3883 failed. Today so far I am at 6665 Connections and 1 failed. So I guess its nothing to worry about for now.
WhiteSites.com Blog.whitesites.com

Reply to Thread