Re: trend-update.pl v1.00 released

Alain Fauconnet <[email protected]> Wed, 6 Oct 2004 16:38:27 +0700
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
Tobias,

On Wed, Oct 06, 2004 at 11:21:53AM +0200, Tobias Reckhard wrote:
> Alain Fauconnet wrote:
> >Trend pattern numbers 2.160 and 2.180 have passed and the  version  of
> >trend-update.pl in use on our own mail  server  runs  smoothly,  so  I
> >think that I can assume that Trend's transition to NPF is done now, and
> >I can release my script for whomever wants it.
> [snip]
> 
> This is very cool and pretty much what I've been looking for. I've got a 
> VirusWall that's scanning HTTP, but I want to use amavisd-new and 
> trophie to scan emails.
> 
> I see that you handle reloading and/or restarting of trophie in your 
> script. But what about the VirusWall itself or, more specifically and in 
> my case, the HTTP scanner? Do you know if it needs to be signalled 
> and/or restarted as well?

No idea, sorry. I don't use VirusWall  myself.  The  box  I'm  running
Trophie on actually has a ServerProtect license.

The safest would be, of course, to stop and restart VirusWall from the
code section in trend-update.pl that SIGHUPs Trophie.
But you may dislike this.

Does  VirusWall  try  to  update  itself  at  fixed  hours  just  like
ServerProtect   does   (from   a   crontab   job)?   If  so,  I'd  put
trend-update.pl aside, let VirusWall do its  updates  and  watch  what
happens  at  that  time  (possibly  by  stracing  the master VirusWall
process - that'll tell you whether it gets a signal of  some  sort  or
what does it do).

That's the best hint I can come up with...

[rest deleted]

Greets,
_Alain_