Move to staged build fangfish for signature updates

fangfrisch.conf

@@ -0,0 +1,118 @@
+[DEFAULT]
+cleanup = automatic
+enabled = false
+integrity_check = sha256
+log_level = INFO
+log_method = console
+max_size = 10MB
+db_url = sqlite:////var/lib/fangfrisch/db.sqlite
+local_directory = /var/lib/clamav
+on_update_timeout = 60
+
+[urlhaus]
+enabled = yes
+max_size = 5MB
+
+[twinwave]
+enabled = yes
+max_size = 5M
+integrity_check = disabled
+interval = 1h
+prefix = https://raw.githubusercontent.com/twinwave-security/twinclams/master/
+url_twinclams = ${prefix}twinclams.ldb
+url_twinwave_ign2 = ${prefix}twinwave.ign2
+
+[sanesecurity]
+enabled = yes
+interval = 2h
+prefix = http://ftp.swin.edu.au/sanesecurity/
+!url_foxhole_all_cdb = ${prefix}foxhole_all.cdb
+!url_foxhole_all_ndb = ${prefix}foxhole_all.ndb
+!url_foxhole_mail = ${prefix}foxhole_mail.cdb
+!url_scamnailer = ${prefix}scamnailer.ndb
+!url_winnow_phish_complete = ${prefix}winnow_phish_complete.ndb
+url_badmacro = ${prefix}badmacro.ndb
+url_blurl = ${prefix}blurl.ndb
+url_bofhland_cracked_url = ${prefix}bofhland_cracked_URL.ndb
+url_bofhland_malware_attach = ${prefix}bofhland_malware_attach.hdb
+url_bofhland_malware_url = ${prefix}bofhland_malware_URL.ndb
+url_bofhland_phishing_url = ${prefix}bofhland_phishing_URL.ndb
+url_foxhole_filename = ${prefix}foxhole_filename.cdb
+url_foxhole_generic = ${prefix}foxhole_generic.cdb
+url_foxhole_js_cdb = ${prefix}foxhole_js.cdb
+url_foxhole_js_ndb = ${prefix}foxhole_js.ndb
+url_hackingteam = ${prefix}hackingteam.hsb
+url_junk = ${prefix}junk.ndb
+url_jurlbl = ${prefix}jurlbl.ndb
+url_jurlbla = ${prefix}jurlbla.ndb
+url_lott = ${prefix}lott.ndb
+url_malwareexpert_fp = ${prefix}malware.expert.fp
+url_malwareexpert_hdb = ${prefix}malware.expert.hdb
+url_malwareexpert_ldb = ${prefix}malware.expert.ldb
+url_malwareexpert_ndb = ${prefix}malware.expert.ndb
+url_malwarehash = ${prefix}malwarehash.hsb
+url_phish = ${prefix}phish.ndb
+url_phishtank = ${prefix}phishtank.ndb
+url_porcupine = ${prefix}porcupine.ndb
+url_rogue = ${prefix}rogue.hdb
+url_scam = ${prefix}scam.ndb
+url_shelter = ${prefix}shelter.ldb
+url_spamattach = ${prefix}spamattach.hdb
+url_spamimg = ${prefix}spamimg.hdb
+url_spear = ${prefix}spear.ndb
+url_spearl = ${prefix}spearl.ndb
+url_winnow_attachments = ${prefix}winnow.attachments.hdb
+url_winnow_bad_cw = ${prefix}winnow_bad_cw.hdb
+url_winnow_extended_malware = ${prefix}winnow_extended_malware.hdb
+url_winnow_extended_malware_links = ${prefix}winnow_extended_malware_links.ndb
+url_winnow_malware = ${prefix}winnow_malware.hdb
+url_winnow_malware_links = ${prefix}winnow_malware_links.ndb
+url_winnow_phish_complete_url = ${prefix}winnow_phish_complete_url.ndb
+url_winnow_spam_complete = ${prefix}winnow_spam_complete.ndb
+
+[malwarepatrol]
+enabled=yes
+interval = 1d
+integrity_check = disabled
+product = 8
+receipt = you_forgot_to_configure_receipt
+prefix = https://lists.malwarepatrol.net/cgi/getfile?product=${product}&receipt=${receipt}&list=
+url_clamav_basic = ${prefix}clamav_basic
+filename_clamav_basic = malwarepatrol.db
+
+[clampunch]
+enabled = yes
+max_size = 2M
+integrity_check = disabled
+interval = 24h
+prefix = https://raw.githubusercontent.com/wmetcalf/clam-punch/master/
+url_miscreantpunch099low = ${prefix}MiscreantPunch099-Low.ldb
+url_exexor99 = ${prefix}exexor99.ldb
+url_miscreantpuchhdb = ${prefix}miscreantpunch.hdb
+
+[rfxn]
+enabled = yes
+interval= 4h
+integrity_check = disabled
+prefix = https://www.rfxn.com/downloads/
+url_rfxn_ndb = ${prefix}rfxn.ndb
+url_rfxn_hdb = ${prefix}rfxn.hdb
+url_rfxn_yara = ${prefix}rfxn.yara
+
+[interserver]
+enabled = yes
+interval = 1d
+integrity_check = disabled
+prefix = https://sigs.interserver.net/
+url_interserver_sha256 = ${prefix}interserver256.hdb
+url_interserver_topline = ${prefix}interservertopline.db
+url_interserver_shell = ${prefix}shell.ldb
+url_interserver_whitelist = ${prefix}whitelist.fp
+
+[ditekshen]
+enabled = yes
+interval = 1d
+integrity_check = disabled
+prefix = https://raw.githubusercontent.com/ditekshen/detection/master/clamav/
+url_ditekshen_ldb = ${prefix}clamav.ldb
+filename_ditekshen_ldb = ditekshen.ldb