Error adding sanesecurity on Zimbra 8.6

gusans · Post by **gusans** » Fri Feb 06, 2015 6:27 pm

hi, i'm following this tutorial step-by-step to add sanesecurity signatures to clamav on Zimbra 8.6 : https://www.jorgedelacruz.es/tag/zimbra-sanesecurity/

the problem i have is with this command:
/opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.sh -c /opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.conf

after the script download the signatures i have the following error:

=================================================
= Update(s) detected, reloaded ClamAV databases =
=================================================
ERROR: Can't parse clamd configuration file /opt/zimbra/clamav-0.98.4/etc/clamd.conf

any ideas?

jorgedlcruz · Post by **jorgedlcruz** » Sat Feb 07, 2015 11:39 am

Hi gusans,
Please keep in mind that the instructions provided in the Blog are not officially supported by Zimbra, so is always a must have a proper backup.Before launch the command that you have erros for, you need to do the next in 8.6:
cp /opt/zimbra/clamav-0.98.4/etc/clamd.conf.sample /opt/zimbra/clamav-0.98.4/etc/clamd.conf
chown zimbra:zimbra /opt/zimbra/clamav-0.98.4/etc/clamd.conf
chmod 755 /opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.sh
And then follow the rest of the Blog, you will see something like this:
zimbra@zimbra-sn-u14-10:~/clamav-unofficial-sigs$ /opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.sh -c /opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.conf

======================================================================
Sanesecurity Database & GPG Signature File Updates
======================================================================

Sanesecurity mirror site used: luxuo-host.unix-scripts.info 195.154.215.181

Number of files: 18 (reg: 18)
Number of created files: 0
Number of regular files transferred: 0
Total file size: 13,833,198 bytes
Total transferred file size: 0 bytes
Literal data: 0 bytes
Matched data: 0 bytes
File list size: 567
File list generation time: 0.138 seconds
File list transfer time: 0.000 seconds
Total bytes sent: 40
Total bytes received: 603

sent 40 bytes received 603 bytes 428.67 bytes/sec
total size is 13,833,198 speedup is 21,513.53

No Sanesecurity database file updates found

======================================================================
SecuriteInfo Database File Updates
======================================================================

4 hours have not yet elapsed since the last SecuriteInfo update check

--- No update check was performed at this time ---

Next check will be performed in approximately 3 hour(s), 48 minute(s)

======================================================================
MalwarePatrol Database File Update
======================================================================

6 hours have not yet elapsed since the last MalwarePatrol download

--- No database download was performed at this time ---

Next download will be performed in approximately 5 hour(s), 48 minute(s)

======================================================================

=============================================================
= No update(s) detected, ClamAV databases were not reloaded =
=============================================================
zimbra@zimbra-sn-u14-10:~/clamav-unofficial-sigs$
Let us know.

gusans · Post by **gusans** » Sat Feb 07, 2015 2:00 pm

hi Jorge, and thanks for the quick response.
did what you sugest and it seems to work fine.
only i had to do was edit /opt/zimbra/clamav-0.98.4/etc/clamd.conf and comment the line 'Example' like said into the file. then the download of signatures was succesful.
now i have another question. after running /opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.sh -c /opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.conf
to download the signatures, the script file changes to 644. is it right?
i added to my crontab this "chmod 755 /opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.sh" before the update command, but i'm not sure if it's the best way.

thanks again for your help!

jorgedlcruz · Post by **jorgedlcruz** » Sat Feb 07, 2015 9:05 pm

Hi gusans,
The best thing that you can do is create a little bash script in the path that you want (please not /tmp or other insecure folder), with:
#!/bin/bash
#
# Script for gusans
#
chmod 755 clamav-unofficial-sigs.sh /opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.sh
/opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.sh -c /opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.conf

And then make it executable, and put this new script in the crontab.
Best regards

gusans · Post by **gusans** » Mon Feb 09, 2015 7:49 am

great! that's what i finally did.

thanks.

jorgedlcruz · Post by **jorgedlcruz** » Mon Feb 09, 2015 7:53 am

Great to hear gusans !

Did you have finally less spam? Hope so !

gusans · Post by **gusans** » Mon Feb 09, 2015 1:30 pm

the signatures downloaded fine. but how can i verify sanesecurity is working?

about spam, can't say i have less. opened another question about it: http://community.zimbra.com/collaborati ... /t/1137990

ccelis5215 · Post by **ccelis5215** » Thu Feb 12, 2015 5:14 pm

Hello gusans,

Did you read http://sanesecurity.com/support/signature-testing/

ccelis.