|Main Archive Page > Month Archives > clamav-users archives|
-----BEGIN PGP SIGNED MESSAGE-----
ilias seperis wrote:
> I've read the FAQ.
> Obviously I didn't explain my case so well.
> I have the following setup:
> headquarters linux server -> satellite communication
> (very expensive) -> remote linux server -> windows
> So, I need something like that:
> 1) The "headquarters linux server" will download the
> incremental files with freshclamav
> 2) These incremental files will be transferred via
> satellite to the "remote linux server". This is very
> expensive, that's why I need as small files as
> 3) The windows clients on this remote site will
> download the incremental files from their local linux
> So the question is, can I somehow keep the incremental
> files that freshclamav downloads at the "headquarters
> linux server", in order to transfer them to the
> "remote linux server"?
> Where are these diff files (main.cvd and daily.cvd)
> being kept before they are patched on the real
> clamav's database?
You mean the .cdiff files? or are you using non-scripted updates?
The answer to your question is the same, except that using cdiffs is less costly (they are smaller), like the FAQ says, but let me put it in another way: set up a proxy server (Squid for instance) on the "headquarters linux" and configure freshclam on both linuxes to use it. Configure the proxy to cache long enough so you can do less updates (once per day for instance) on the remote server.
On the "remote linux" you could use rsync to push (or pull) the changes to your clients (with the 'OnUpdateExecute command' option), and forget about freshclam on those clients. If you are using .cvd files, you can also use the second part of the FAQ answer: use "remote linux" as database server, by changing the client freshclams to use 'ScriptedUpdates off'. There may be a way to convert the *.inc directories to .cvd files.
> What is the difference between main.cvd and daily.cvd?
They are the the stable and dynamic parts of the database. Main.inc/main.cvd
has the signatures that have been used a long time, daily.inc/daily.cvd has the
recently added signatures; both change, daily much more often, but main does change.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Cygwin)
-----END PGP SIGNATURE-----