Re: malware db retrieval and usage

>>>>> On Fri, 29 Nov 2024 13:29:46 -0700, D  said:
> 
> Which components (DIR,SD,FD,etc) of Bacula retrieve the malware database 
> from the internet and which components use the malware database?

The doc
https://www.bacula.org/15.0.x-manuals/en/main/Using_Bacula_Improve_Comput.html#SECTION0047600000000000000000
is rather vague about it, but it seems to all be done by the DIR.

> I need to know because our production servers are forbidden from 
> accessing the internet for updates so we have an in-house repository 
> server most everything.  I need to configure the correct Bacula 
> components to retrieve the malware database from our in-house repository.
> 
> Also, which databases do I need to replicate onto our in-house repository?

The DIR runs the script get_malware_abuse.ch from the same directory as the
bacula-dir (or you can configure MalwareDatabaseCommand, but it must have the
same arguments, output and and return code as get_malware_abuse.ch).

__Martin