Signature Providers

Third party signatures allow you to enhance the virus detection rate of ClamAV.

• These signature providers are independant from Danami therefore we have no control over them. Make sure to watch for false positives after enabling a new provider.
• When a provider is enabled the provider URLs will be added to Settings -> Signature Updates -> DatabaseCustomURL. Signature update logs can be found under Logs -> Signature Log.
• We recommend that you enable Settings -> Anti-virus Settings -> Concurrent database reload to allow for non-blocking (multi-threaded/concurrent) database reloads (For systems with more than 4 GB of memory).
• Provider files are downloaded to the /var/lib/clamav/ directory. Warden will delete a database when it is de-selected or when the provider is disabled.
• The ClamAV daemon will use over 1 GB of memory with all the providers enabled so make sure your server has enough memory before enabling any providers.
• These signature providers are independant from Danami therefore we have no control over them. Make sure to watch for false positives after enabling a new provider.

InterServer

Interserver is a set of free ClamAV signatures focused on malicious PHP scripts and is maintained by the hosting provider InterServer. It provides a real time suspected malware list as detected by InterServers InterShield protection system.

interserver_enable - interserver_enable
Enable or disable the InterServer signature provider.
Default: 0

interserver_provider_url - interserver_provider_url
The base URL of this signature provider.
Default: https://sigs.interserver.net/

interserver_provider_files - interserver_provider_files
The signature database files to download from this provider.
Default: interserver256.hdb interservertopline.db shell.ldb whitelist.fp