Back to Community Threads
Does ClamAV auto update definitions?
Question asked by Paul White - 6/6/2016 at 1:01 PM
Answered
I have the latest version of smartermail 15 running.  I have enabled clamAV, and its working great.  Catching about dozen virus emails every day now.  Today I got a report from a user that they got a virus in their email, and looked and it looks like ClamAV did not catch this one, though it caught 4 other emails sent from the same user.  My only thought is ClamAV doesn't have a definition to catch this particular virus.  Question is does ClamAV automatically update its definitions, and if so how often?  Or do I need to run some kind of chron job to automatically update it?
WhiteSites.com
Blog.whitesites.com
Matt Petty Replied
6/6/2016 at 1:25 PM
Employee Post Marked As Answer
Yes it does automatically, every 6 hours.
Matt Petty Senior Software Developer SmarterTools Inc. www.smartertools.com
Paul White Replied
6/6/2016 at 2:39 PM
Thanks Matt,
question could the non detect on a virus be tied to failed connections to ClamAV?
Today I seem to have much higher failed connections than usual.
Example
6/3 21757 Connections, 19 failed
6/4 6563 Connections, 17 failed
6/5 7316 Connections, 9 failed
6/6 6876 Connections, 3883 failed
 
Any idea what would cause so many failed connections?
WhiteSites.com Blog.whitesites.com
Matt Petty Replied
6/7/2016 at 8:51 AM
Employee Post
Failures happen when it hits and exception or fails to talk to Cyren. There isn't a sure fire way to tell, but that trend in connection failures is odd compared to the rest of the days. Was there a change in traffic or anything?
Matt Petty Senior Software Developer SmarterTools Inc. www.smartertools.com
Paul White Replied
6/7/2016 at 9:01 AM
No change in traffic, though I get the feeling something was wrong for a short amount of time as the day finished off at 3883 failed. Today so far I am at 6665 Connections and 1 failed. So I guess its nothing to worry about for now.
WhiteSites.com Blog.whitesites.com
Back to Community Threads

Reply to Thread

Enter the verification text
Related Knowledge Base Articles
Manually Securing SmarterMail Using Let's Encrypt and Certify the WebSmarterMail > Installation and Configuration
Deploying Rspamd For Use With SmarterMailSmarterMail > Server Configuration and Management
Reducing ClamAV False PositivesSmarterMail > Troubleshooting
Email Clients and SmarterMail Language SettingsSmarterMail > Desktop and Mobile Synchronization
Set up SmarterMail as an IIS Site in IIS 8SmarterMail > Server Configuration and Management