date:20180626

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Joel Esler (jesler)

Db.us should be good on both now.

Sent from my iPhone

On Jun 26, 2018, at 21:15, Al Varnell 
mailto:alvarn...@mac.com>> wrote:

Worked perfectly from California, but with .cdiff updates, not the entire .cvd.

Let me know if I need to check the .cvd.

-Al-

On Tue, Jun 26, 2018 at 05:40 PM, Joel Esler (jesler) wrote:
I just purged db.us’s cache.  Can you try?

Sent from my iPhone

On Jun 26, 2018, at 20:24, Paul Kosinski 
mailto:clamav-us...@iment.com>> wrote:

Joel,

Sorry to have been somewhat cryptic: I assumed the context of the
posting I was nominally replying to.

By "broken", I meant that freshclam cannot retrieve daily.cvd files
from the new CloudFlare IPs. In fact, I just now removed mirrors.dat,
and all(?) the new CloudFlare IPs report "not synchronized", probably
due to the ping.clamav.net failures (see below):

WARNING: Mirror 104.16.185.138 is not synchronized.
WARNING: Mirror 104.16.186.138 is not synchronized.
WARNING: Mirror 104.16.187.138 is not synchronized.
WARNING: Mirror 104.16.188.138 is not synchronized.
WARNING: Mirror 104.16.189.138 is not synchronized.

The command "host -t txt current.cvd.clamav.net" 
reports as follows:

current.cvd.clamav.net descriptive text 
"0.100.0:58:24699:1530048540:1:63:47550:322"

But the freshclam log reports some variant of:

Querying daily.0.85.0.0.6810BD8A.ping.clamav.net
Can't query daily.0.85.0.0.6810BD8A.ping.clamav.net
Giving up on db.us.clamav.net...

None of my local recursive DNS, my off-site Web server (in another
state), or (apparently) 8.8.8.8 or 8.8.4.4 can resolve
daily.0.85.0.0.6810BD8A.ping.clamav.net, but 
mxtoolbox.com resolves it,
(via ns4.clamav.net) to:

5.9.14.57 at Hetzner Online AG (AS24940)

Weird.

However, it seems I *can* get at the daily.cvd file by means of direct HTTP
access to "http://db.us.clamav.net/daily.cvd;, which accesses the same
CloudFlare IPs that are allegedly "not synchronized".

The result of all this confusion is that the last time I got a
daily.cvd via freshclam was before CloudFlare:

Monday 25 June 2018 at 09:06:26
Database updated (6556585 signatures) from 
db.us.clamav.net (IP: 200.236.31.1)

I am going to have to use the direct HTTP until [whenever]?




On Tue, 26 Jun 2018 20:01:09 +
"Joel Esler (jesler)" mailto:jes...@cisco.com>> wrote:

Define broken in your context?  Doesn't have the file?  (Humor me, so
I understand from your parlance)



On Jun 26, 2018, at 2:59 PM, Paul Kosinski 
mailto:clamav-us...@iment.com>>
wrote:

ALL of the db.xx.clamav.net (plus 
database.clamav.net) apparently
point to CloudFlare, and they are ALL broken. (And have been for
many hours.)


On Tue, 26 Jun 2018 11:09:08 -0700
Dave Warren mailto:d...@thedave.ca>> wrote:

As that is a Cloudflare IP, I believe it possibly could represent
one or more backend mirrors as it may return different content
depending on the hostname provided.

On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
Joel,

I'm now getting "WARNING: Mirror 104.16.188.138 is not
synchronized." when using the CDN. Could it be related to the
changes made to fix this as my definitions are 3 revisions out?>
Thanks,

On 25 June 2018 at 04:28, Joel Esler (jesler)
mailto:jes...@cisco.com>> wrote:>> Al,


Thanks. We are aware.  Looking into it.

Sent from my iPhone


On Jun 24, 2018, at 23:12, Al Varnell 
mailto:alvarn...@mac.com>> wrote:

Yes, but all but one was empty.

Sent from my iPad

-Al-

On Jun 24, 2018, at 19:42, Paul Kosinski
mailto:clamav-us...@iment.com>> wrote:>>  >>
I've gotten several daily.cvd updates in that period. They came
from>>  >> several IP addresses associated with
from>>  >> http://db.us.clamav.net/.


On Sun, 24 Jun 2018 18:08:59 -0700
Al Varnell mailto:alvarn...@mac.com>> wrote:

Just wanted to point out that there has only been one
signature
added>>  >>> to the VirusDB by daily updates in the last 32
added>>  >>> hours.


-Al-

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

-Al-
--
Al Varnell
Mountain View, CA




___
clamav-users mailing list

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Al Varnell

Worked perfectly from California, but with .cdiff updates, not the entire .cvd.

Let me know if I need to check the .cvd.

-Al-

On Tue, Jun 26, 2018 at 05:40 PM, Joel Esler (jesler) wrote:
> I just purged db.us ’s cache.  Can you try?
> 
> Sent from my iPhone
> 
>> On Jun 26, 2018, at 20:24, Paul Kosinski > > wrote:
>> 
>> Joel,
>> 
>> Sorry to have been somewhat cryptic: I assumed the context of the
>> posting I was nominally replying to.
>> 
>> By "broken", I meant that freshclam cannot retrieve daily.cvd files
>> from the new CloudFlare IPs. In fact, I just now removed mirrors.dat,
>> and all(?) the new CloudFlare IPs report "not synchronized", probably
>> due to the ping.clamav.net  failures (see below):
>> 
>> WARNING: Mirror 104.16.185.138 is not synchronized.
>> WARNING: Mirror 104.16.186.138 is not synchronized.
>> WARNING: Mirror 104.16.187.138 is not synchronized.
>> WARNING: Mirror 104.16.188.138 is not synchronized.
>> WARNING: Mirror 104.16.189.138 is not synchronized.
>> 
>> The command "host -t txt current.cvd.clamav.net 
>> " reports as follows:
>> 
>> current.cvd.clamav.net  descriptive text 
>> "0.100.0:58:24699:1530048540:1:63:47550:322"
>> 
>> But the freshclam log reports some variant of:
>> 
>> Querying daily.0.85.0.0.6810BD8A.ping.clamav.net
>> Can't query daily.0.85.0.0.6810BD8A.ping.clamav.net
>> Giving up on db.us.clamav.net ...
>> 
>> None of my local recursive DNS, my off-site Web server (in another
>> state), or (apparently) 8.8.8.8 or 8.8.4.4 can resolve
>> daily.0.85.0.0.6810BD8A.ping.clamav.net, but mxtoolbox.com 
>>  resolves it,
>> (via ns4.clamav.net ) to:
>> 
>> 5.9.14.57 at Hetzner Online AG (AS24940)
>> 
>> Weird.
>> 
>> However, it seems I *can* get at the daily.cvd file by means of direct HTTP
>> access to "http://db.us.clamav.net/daily.cvd 
>> ", which accesses the same
>> CloudFlare IPs that are allegedly "not synchronized".
>> 
>> The result of all this confusion is that the last time I got a
>> daily.cvd via freshclam was before CloudFlare:
>> 
>> Monday 25 June 2018 at 09:06:26
>> Database updated (6556585 signatures) from db.us.clamav.net 
>>  (IP: 200.236.31.1)
>> 
>> I am going to have to use the direct HTTP until [whenever]?
>> 
>> 
>> 
>> 
>> On Tue, 26 Jun 2018 20:01:09 +
>> "Joel Esler (jesler)" mailto:jes...@cisco.com>> wrote:
>> 
>>> Define broken in your context?  Doesn't have the file?  (Humor me, so
>>> I understand from your parlance)
>>> 
>>> 
>>> 
 On Jun 26, 2018, at 2:59 PM, Paul Kosinski >>> >
 wrote:
 
 ALL of the db.xx.clamav.net  (plus 
 database.clamav.net ) apparently
 point to CloudFlare, and they are ALL broken. (And have been for
 many hours.)
 
 
 On Tue, 26 Jun 2018 11:09:08 -0700
 Dave Warren mailto:d...@thedave.ca>> wrote:
 
> As that is a Cloudflare IP, I believe it possibly could represent
> one or more backend mirrors as it may return different content
> depending on the hostname provided.
> 
>> On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
>> Joel, 
>> 
>> I'm now getting "WARNING: Mirror 104.16.188.138 is not
>> synchronized." when using the CDN. Could it be related to the
>> changes made to fix this as my definitions are 3 revisions out?> 
>> Thanks, 
>> 
>> On 25 June 2018 at 04:28, Joel Esler (jesler)
>> mailto:jes...@cisco.com>> wrote:>> Al,
>>> 
>>> 
>>> Thanks. We are aware.  Looking into it.  
>>> 
>>> Sent from my iPhone
>>> 
>>> 
 On Jun 24, 2018, at 23:12, Al Varnell >>> > wrote:
 
 Yes, but all but one was empty.
 
 Sent from my iPad
 
 -Al-
 
> On Jun 24, 2018, at 19:42, Paul Kosinski
> mailto:clamav-us...@iment.com>> wrote:>>  >> 
> I've gotten several daily.cvd updates in that period. They came
> from>>  >> several IP addresses associated with
> from>>  >> http://db.us.clamav.net/ .
> 
> 
> On Sun, 24 Jun 2018 18:08:59 -0700
> Al Varnell mailto:alvarn...@mac.com>> wrote:
> 
>> Just wanted to point out that there has only been one
>> signature
>> added>>  >>> to the VirusDB by daily updates in the last 32
>> added>>  >>> hours.
>> 
>> 
>> -Al-
>> 
>> ___
>> clamav-users mailing list
>> clamav-users@lists.clamav.net 
>>

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Paul Kosinski

My freshclam run a few minutes after my detailed mail worked, and
pulled in a lot of new signatures.

Don't know if the db.us cache purging was the magic or not -- my
earlier tests with db.ca, db.jp etc. all failed -- but now it works.

Great!


On Wed, 27 Jun 2018 00:40:10 +
"Joel Esler (jesler)"  wrote:

> I just purged db.us’s cache.  Can you try?
> 
> Sent from my iPhone
> 
> > On Jun 26, 2018, at 20:24, Paul Kosinski 
> > wrote:
> > 
> > Joel,
> > 
> > Sorry to have been somewhat cryptic: I assumed the context of the
> > posting I was nominally replying to.
> > 
> > By "broken", I meant that freshclam cannot retrieve daily.cvd files
> > from the new CloudFlare IPs. In fact, I just now removed
> > mirrors.dat, and all(?) the new CloudFlare IPs report "not
> > synchronized", probably due to the ping.clamav.net failures (see
> > below):
> > 
> >  WARNING: Mirror 104.16.185.138 is not synchronized.
> >  WARNING: Mirror 104.16.186.138 is not synchronized.
> >  WARNING: Mirror 104.16.187.138 is not synchronized.
> >  WARNING: Mirror 104.16.188.138 is not synchronized.
> >  WARNING: Mirror 104.16.189.138 is not synchronized.
> > 
> > The command "host -t txt current.cvd.clamav.net" reports as follows:
> > 
> >  current.cvd.clamav.net descriptive text
> > "0.100.0:58:24699:1530048540:1:63:47550:322"
> > 
> > But the freshclam log reports some variant of:
> > 
> >  Querying daily.0.85.0.0.6810BD8A.ping.clamav.net
> >  Can't query daily.0.85.0.0.6810BD8A.ping.clamav.net
> >  Giving up on db.us.clamav.net...
> > 
> > None of my local recursive DNS, my off-site Web server (in another
> > state), or (apparently) 8.8.8.8 or 8.8.4.4 can resolve
> > daily.0.85.0.0.6810BD8A.ping.clamav.net, but mxtoolbox.com resolves
> > it, (via ns4.clamav.net) to:
> > 
> >  5.9.14.57 at Hetzner Online AG (AS24940)
> > 
> > Weird.
> > 
> > However, it seems I *can* get at the daily.cvd file by means of
> > direct HTTP access to "http://db.us.clamav.net/daily.cvd;, which
> > accesses the same CloudFlare IPs that are allegedly "not
> > synchronized".
> > 
> > The result of all this confusion is that the last time I got a
> > daily.cvd via freshclam was before CloudFlare:
> > 
> >  Monday 25 June 2018 at 09:06:26
> >  Database updated (6556585 signatures) from db.us.clamav.net (IP:
> > 200.236.31.1)
> > 
> > I am going to have to use the direct HTTP until [whenever]?
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Joel Esler (jesler)

I just purged db.us’s cache.  Can you try?

Sent from my iPhone

> On Jun 26, 2018, at 20:24, Paul Kosinski  wrote:
> 
> Joel,
> 
> Sorry to have been somewhat cryptic: I assumed the context of the
> posting I was nominally replying to.
> 
> By "broken", I meant that freshclam cannot retrieve daily.cvd files
> from the new CloudFlare IPs. In fact, I just now removed mirrors.dat,
> and all(?) the new CloudFlare IPs report "not synchronized", probably
> due to the ping.clamav.net failures (see below):
> 
>  WARNING: Mirror 104.16.185.138 is not synchronized.
>  WARNING: Mirror 104.16.186.138 is not synchronized.
>  WARNING: Mirror 104.16.187.138 is not synchronized.
>  WARNING: Mirror 104.16.188.138 is not synchronized.
>  WARNING: Mirror 104.16.189.138 is not synchronized.
> 
> The command "host -t txt current.cvd.clamav.net" reports as follows:
> 
>  current.cvd.clamav.net descriptive text 
> "0.100.0:58:24699:1530048540:1:63:47550:322"
> 
> But the freshclam log reports some variant of:
> 
>  Querying daily.0.85.0.0.6810BD8A.ping.clamav.net
>  Can't query daily.0.85.0.0.6810BD8A.ping.clamav.net
>  Giving up on db.us.clamav.net...
> 
> None of my local recursive DNS, my off-site Web server (in another
> state), or (apparently) 8.8.8.8 or 8.8.4.4 can resolve
> daily.0.85.0.0.6810BD8A.ping.clamav.net, but mxtoolbox.com resolves it,
> (via ns4.clamav.net) to:
> 
>  5.9.14.57 at Hetzner Online AG (AS24940)
> 
> Weird.
> 
> However, it seems I *can* get at the daily.cvd file by means of direct HTTP
> access to "http://db.us.clamav.net/daily.cvd;, which accesses the same
> CloudFlare IPs that are allegedly "not synchronized".
> 
> The result of all this confusion is that the last time I got a
> daily.cvd via freshclam was before CloudFlare:
> 
>  Monday 25 June 2018 at 09:06:26
>  Database updated (6556585 signatures) from db.us.clamav.net (IP: 
> 200.236.31.1)
> 
> I am going to have to use the direct HTTP until [whenever]?
> 
> 
> 
> 
> On Tue, 26 Jun 2018 20:01:09 +
> "Joel Esler (jesler)"  wrote:
> 
>> Define broken in your context?  Doesn't have the file?  (Humor me, so
>> I understand from your parlance)
>> 
>> 
>> 
>>> On Jun 26, 2018, at 2:59 PM, Paul Kosinski 
>>> wrote:
>>> 
>>> ALL of the db.xx.clamav.net (plus database.clamav.net) apparently
>>> point to CloudFlare, and they are ALL broken. (And have been for
>>> many hours.)
>>> 
>>> 
>>> On Tue, 26 Jun 2018 11:09:08 -0700
>>> Dave Warren  wrote:
>>> 
 As that is a Cloudflare IP, I believe it possibly could represent
 one or more backend mirrors as it may return different content
 depending on the hostname provided.
 
> On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
> Joel, 
> 
> I'm now getting "WARNING: Mirror 104.16.188.138 is not
> synchronized." when using the CDN. Could it be related to the
> changes made to fix this as my definitions are 3 revisions out?> 
> Thanks, 
> 
> On 25 June 2018 at 04:28, Joel Esler (jesler)
>  wrote:>> Al,
>> 
>> 
>> Thanks. We are aware.  Looking into it.  
>> 
>> Sent from my iPhone
>> 
>> 
>>> On Jun 24, 2018, at 23:12, Al Varnell  wrote:
>>> 
>>> Yes, but all but one was empty.
>>> 
>>> Sent from my iPad
>>> 
>>> -Al-
>>> 
 On Jun 24, 2018, at 19:42, Paul Kosinski
  wrote:>>  >> 
 I've gotten several daily.cvd updates in that period. They came
 from>>  >> several IP addresses associated with
 from>>  >> http://db.us.clamav.net/.
 
 
 On Sun, 24 Jun 2018 18:08:59 -0700
 Al Varnell  wrote:
 
> Just wanted to point out that there has only been one
> signature
> added>>  >>> to the VirusDB by daily updates in the last 32
> added>>  >>> hours.
> 
> 
> -Al-
> 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Paul Kosinski

Joel,

Sorry to have been somewhat cryptic: I assumed the context of the
posting I was nominally replying to.

By "broken", I meant that freshclam cannot retrieve daily.cvd files
from the new CloudFlare IPs. In fact, I just now removed mirrors.dat,
and all(?) the new CloudFlare IPs report "not synchronized", probably
due to the ping.clamav.net failures (see below):

  WARNING: Mirror 104.16.185.138 is not synchronized.
  WARNING: Mirror 104.16.186.138 is not synchronized.
  WARNING: Mirror 104.16.187.138 is not synchronized.
  WARNING: Mirror 104.16.188.138 is not synchronized.
  WARNING: Mirror 104.16.189.138 is not synchronized.

The command "host -t txt current.cvd.clamav.net" reports as follows:

  current.cvd.clamav.net descriptive text 
"0.100.0:58:24699:1530048540:1:63:47550:322"

But the freshclam log reports some variant of:

  Querying daily.0.85.0.0.6810BD8A.ping.clamav.net
  Can't query daily.0.85.0.0.6810BD8A.ping.clamav.net
  Giving up on db.us.clamav.net...

None of my local recursive DNS, my off-site Web server (in another
state), or (apparently) 8.8.8.8 or 8.8.4.4 can resolve
daily.0.85.0.0.6810BD8A.ping.clamav.net, but mxtoolbox.com resolves it,
(via ns4.clamav.net) to:

  5.9.14.57 at Hetzner Online AG (AS24940)

Weird.

However, it seems I *can* get at the daily.cvd file by means of direct HTTP
access to "http://db.us.clamav.net/daily.cvd;, which accesses the same
CloudFlare IPs that are allegedly "not synchronized".

The result of all this confusion is that the last time I got a
daily.cvd via freshclam was before CloudFlare:

  Monday 25 June 2018 at 09:06:26
  Database updated (6556585 signatures) from db.us.clamav.net (IP: 200.236.31.1)

I am going to have to use the direct HTTP until [whenever]?

On Tue, 26 Jun 2018 20:01:09 +
"Joel Esler (jesler)"  wrote:

> Define broken in your context?  Doesn't have the file?  (Humor me, so
> I understand from your parlance)
> 
> 
> 
> > On Jun 26, 2018, at 2:59 PM, Paul Kosinski 
> > wrote:
> > 
> > ALL of the db.xx.clamav.net (plus database.clamav.net) apparently
> > point to CloudFlare, and they are ALL broken. (And have been for
> > many hours.)
> > 
> > 
> > On Tue, 26 Jun 2018 11:09:08 -0700
> > Dave Warren  wrote:
> > 
> >> As that is a Cloudflare IP, I believe it possibly could represent
> >> one or more backend mirrors as it may return different content
> >> depending on the hostname provided.
> >> 
> >> On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
> >>> Joel, 
> >>> 
> >>> I'm now getting "WARNING: Mirror 104.16.188.138 is not
> >>> synchronized." when using the CDN. Could it be related to the
> >>> changes made to fix this as my definitions are 3 revisions out?> 
> >>> Thanks, 
> >>> 
> >>> On 25 June 2018 at 04:28, Joel Esler (jesler)
> >>>  wrote:>> Al,
>  
>  
>  Thanks. We are aware.  Looking into it.  
>  
>  Sent from my iPhone
>  
>  
> > On Jun 24, 2018, at 23:12, Al Varnell  wrote:
> > 
> > Yes, but all but one was empty.
> > 
> > Sent from my iPad
> > 
> > -Al-
> > 
> >> On Jun 24, 2018, at 19:42, Paul Kosinski
> >>  wrote:>>  >> 
> >> I've gotten several daily.cvd updates in that period. They came
> >> from>>  >> several IP addresses associated with
> >> from>>  >> http://db.us.clamav.net/.
> >> 
> >> 
> >> On Sun, 24 Jun 2018 18:08:59 -0700
> >> Al Varnell  wrote:
> >> 
> >>> Just wanted to point out that there has only been one
> >>> signature
> >>> added>>  >>> to the VirusDB by daily updates in the last 32
> >>> added>>  >>> hours.
> >>> 
> >>> 
> >>> -Al-

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Mirror Load + ClamAV Updates

2018-06-26 Thread Freddie Cash

On Tue, Jun 26, 2018 at 3:10 PM, Micah Snyder (micasnyd)  wrote:

> What is the output of "freshclam --list-mirrors"?  You may need to delete
> your mirrors.dat file (located with your databases) and then try freshclam
> again.
>

I deleted mirrors.dat before restarting freshclam each time; otherwise it
just spits out "skipping mirror due to previous problems" and does
nothing.  :)  The log entries I've posted are all from running:

rm mirrors.dat; service clamav-freshclam restart; tail -f
/var/log/freshclam.log

But here's the output from list-mirrors:

Tue Jun 26 15:12:09 2018 -> *Current working dir is /var/lib/clamav
Mirror #1
IP: 104.16.185.138
Successes: 1
Failures: 1
Last access: Tue Jun 26 15:08:14 2018
Ignore: Yes
-
Mirror #2
IP: 104.16.188.138
Successes: 1
Failures: 1
Last access: Tue Jun 26 15:08:24 2018
Ignore: Yes
-
Mirror #3
IP: 104.16.187.138
Successes: 1
Failures: 1
Last access: Tue Jun 26 15:08:34 2018
Ignore: Yes
-
Mirror #4
IP: 104.16.189.138
Successes: 1
Failures: 1
Last access: Tue Jun 26 15:08:44 2018
Ignore: Yes
-
Mirror #5
IP: 104.16.186.138
Successes: 1
Failures: 1
Last access: Tue Jun 26 15:08:52 2018
Ignore: Yes
-
Mirror #6
IP: 2400:cb00:2048:1::6810:bb8a
Successes: 0
Failures: 1
Last access: Tue Jun 26 15:08:52 2018
Ignore: Yes
-
Mirror #7
IP: 2400:cb00:2048:1::6810:bc8a
Successes: 0
Failures: 1
Last access: Tue Jun 26 15:08:52 2018
Ignore: Yes
-
Mirror #8
IP: 2400:cb00:2048:1::6810:bd8a
Successes: 0
Failures: 1
Last access: Tue Jun 26 15:08:52 2018
Ignore: Yes
-
Mirror #9
IP: 2400:cb00:2048:1::6810:b98a
Successes: 0
Failures: 1
Last access: Tue Jun 26 15:08:52 2018
Ignore: Yes
-
Mirror #10
IP: 2400:cb00:2048:1::6810:ba8a
Successes: 0
Failures: 1
Last access: Tue Jun 26 15:08:52 2018
Ignore: Yes

-- 
Freddie Cash
fjwc...@gmail.com
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Mirror Load + ClamAV Updates

2018-06-26 Thread Micah Snyder (micasnyd)

What is the output of "freshclam --list-mirrors"?  You may need to delete your 
mirrors.dat file (located with your databases) and then try freshclam again.

Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.


On Jun 26, 2018, at 5:57 PM, Freddie Cash 
mailto:fjwc...@gmail.com>> wrote:

On Tue, Jun 26, 2018 at 2:41 PM, Freddie Cash 
mailto:fjwc...@gmail.com>> wrote:
On Tue, Jun 26, 2018 at 2:17 PM, Joel Esler (jesler) 
mailto:jes...@cisco.com>> wrote:
Team --

Today we were able to add 100% of the mirror infrastructure to our CDN, 
Cloudflare.  We are currently measuring the load and evaluating the viability 
and problems (if any) with this solution.  We are currently pushing approx 12GB 
a second through their Tier 1 POP locations.

We are seeking feedback about the stability of this, or if any updates are 
failing.  (I have seen the thread that is currently on-going).


If you having problems downloading from the ClamAV mirror infrastructure, 
please delete your mirrors.dat file and start over.

This is on Debian 8 which is why the ClamAV version is a little behind.

Turns out ClamAV 0.100.0 is available in Debian 8.  But, upgrading to it 
doesn't change the end result.  No mirrors available to download from.

Tue Jun 26 14:54:54 2018 -> Current working dir is /var/lib/clamav
Tue Jun 26 14:54:54 2018 -> freshclam daemon 0.100.0 (OS: linux-gnu, ARCH: 
x86_64, CPU: x86_64)
Tue Jun 26 14:54:54 2018 -> Max retries == 5
Tue Jun 26 14:54:54 2018 -> ClamAV update process started at Tue Jun 26 
14:54:54 2018
Tue Jun 26 14:54:54 2018 -> Using IPv6 aware code
Tue Jun 26 14:54:54 2018 -> Querying 
current.cvd.clamav.net
Tue Jun 26 14:54:54 2018 -> TTL: 538
Tue Jun 26 14:54:54 2018 -> Software version from DNS: 0.100.0
Tue Jun 26 14:54:54 2018 -> main.cvd version from DNS: 58
Tue Jun 26 14:54:54 2018 -> main.cvd is up to date (version: 58, sigs: 4566249, 
f-level: 60, builder: sigmgr)
Tue Jun 26 14:54:54 2018 -> daily.cvd version from DNS: 24699
Tue Jun 26 14:54:54 2018 -> Retrieving http://db.ca.clamav.net/daily.cvd
Tue Jun 26 14:54:54 2018 -> Trying to download 
http://db.ca.clamav.net/daily.cvd (IP: 104.16.186.138)
Tue Jun 26 14:54:56 2018 -> Downloading daily.cvd [100%]
Tue Jun 26 14:54:57 2018 -> WARNING: Mirror 104.16.186.138 is not synchronized.
Tue Jun 26 14:54:57 2018 -> Querying 
daily.0.91.0.0.6810BA8A.ping.clamav.net
Tue Jun 26 14:54:57 2018 -> Can't query 
daily.0.91.0.0.6810BA8A.ping.clamav.net
Tue Jun 26 14:54:57 2018 -> Trying again in 5 secs...
Tue Jun 26 14:55:02 2018 -> ClamAV update process started at Tue Jun 26 
14:55:02 2018
Tue Jun 26 14:55:02 2018 -> Using IPv6 aware code
Tue Jun 26 14:55:02 2018 -> Querying 
current.cvd.clamav.net
Tue Jun 26 14:55:02 2018 -> TTL: 530
Tue Jun 26 14:55:02 2018 -> Software version from DNS: 0.100.0
Tue Jun 26 14:55:02 2018 -> main.cvd version from DNS: 58
Tue Jun 26 14:55:02 2018 -> main.cvd is up to date (version: 58, sigs: 4566249, 
f-level: 60, builder: sigmgr)
Tue Jun 26 14:55:02 2018 -> daily.cvd version from DNS: 24699
Tue Jun 26 14:55:02 2018 -> Retrieving http://db.ca.clamav.net/daily.cvd
Tue Jun 26 14:55:02 2018 -> Ignoring mirror 104.16.185.138 (due to previous 
errors)
Tue Jun 26 14:55:02 2018 -> Ignoring mirror 104.16.186.138 (due to previous 
errors)
Tue Jun 26 14:55:02 2018 -> Trying host 
db.ca.clamav.net (104.16.188.138)...
Tue Jun 26 14:55:02 2018 -> Trying to download 
http://db.ca.clamav.net/daily.cvd (IP: 104.16.188.138)
Tue Jun 26 14:55:03 2018 -> Downloading daily.cvd [100%]
Tue Jun 26 14:55:05 2018 -> WARNING: Mirror 104.16.188.138 is not synchronized.
Tue Jun 26 14:55:05 2018 -> Querying 
daily.0.91.0.0.6810BC8A.ping.clamav.net
Tue Jun 26 14:55:05 2018 -> Can't query 
daily.0.91.0.0.6810BC8A.ping.clamav.net
Tue Jun 26 14:55:05 2018 -> Trying again in 5 secs...
Tue Jun 26 14:55:10 2018 -> ClamAV update process started at Tue Jun 26 
14:55:10 2018
Tue Jun 26 14:55:10 2018 -> Using IPv6 aware code
Tue Jun 26 14:55:10 2018 -> Querying 
current.cvd.clamav.net
Tue Jun 26 14:55:10 2018 -> TTL: 522
Tue Jun 26 14:55:10 2018 -> Software version from DNS: 0.100.0
Tue Jun 26 14:55:10 2018 -> main.cvd version from DNS: 58
Tue Jun 26 14:55:10 2018 -> main.cvd is up to date (version: 58, sigs: 4566249, 
f-level: 60, builder: sigmgr)
Tue Jun 26 14:55:10 2018 -> daily.cvd version from DNS: 24699
Tue Jun 26 14:55:10 2018 -> Retrieving http://db.ca.clamav.net/daily.cvd
Tue Jun 26 14:55:10 2018 -> Ignoring mirror 104.16.188.138 (due to previous 
errors)
Tue Jun 26 14:55:10 2018 -> Ignoring mirror 104.16.185.138 (due to previous 
errors)
Tue Jun 26 14:55:10 2018 -> Trying host 
db.ca.clamav.net

Re: [clamav-users] Mirror Load + ClamAV Updates

2018-06-26 Thread Freddie Cash

On Tue, Jun 26, 2018 at 2:17 PM, Joel Esler (jesler) 
wrote:

> Team --
>
> Today we were able to add 100% of the mirror infrastructure to our CDN,
> Cloudflare.  We are currently measuring the load and evaluating the
> viability and problems (if any) with this solution.  We are currently
> pushing approx 12GB a second through their Tier 1 POP locations.
>
> We are seeking feedback about the stability of this, or if any updates are
> failing.  (I have seen the thread that is currently on-going).
>
>
> If you having problems downloading from the ClamAV mirror infrastructure,
> please delete your mirrors.dat file and start over.
>

The auto-updates via FreshClam have failed 4 times since midnight (00:36,
04:36, 08:36, 12:36) this morning.

Tue Jun 26 12:37:19 2018 -> ClamAV update process started at Tue Jun 26
12:37:19 2018
Tue Jun 26 12:37:19 2018 -> Using IPv6 aware code
Tue Jun 26 12:37:19 2018 -> Querying current.cvd.clamav.net
Tue Jun 26 12:37:19 2018 -> TTL: 1780
Tue Jun 26 12:37:19 2018 -> Software version from DNS: 0.100.0
Tue Jun 26 12:37:19 2018 -> WARNING: Your ClamAV installation is OUTDATED!
Tue Jun 26 12:37:19 2018 -> WARNING: Local version: 0.99.3 Recommended
version: 0.100.0
Tue Jun 26 12:37:19 2018 -> DON'T PANIC! Read
http://www.clamav.net/documents/upgrading-clamav
Tue Jun 26 12:37:19 2018 -> main.cvd version from DNS: 58
Tue Jun 26 12:37:19 2018 -> main.cvd is up to date (version: 58, sigs:
4566249, f-level: 60, builder: sigmgr)
Tue Jun 26 12:37:19 2018 -> daily.cvd version from DNS: 24698
Tue Jun 26 12:37:19 2018 -> Retrieving http://db.local.clamav.net/daily.cvd
Tue Jun 26 12:37:20 2018 -> Ignoring mirror 104.16.185.138 (due to previous
errors)
Tue Jun 26 12:37:20 2018 -> Ignoring mirror 104.16.186.138 (due to previous
errors)
Tue Jun 26 12:37:20 2018 -> Ignoring mirror 104.16.187.138 (due to previous
errors)
Tue Jun 26 12:37:20 2018 -> Ignoring mirror 104.16.189.138 (due to previous
errors)
Tue Jun 26 12:37:20 2018 -> Ignoring mirror 104.16.188.138 (due to previous
errors)
Tue Jun 26 12:37:20 2018 -> Ignoring mirror 2400:cb00:2048:1::6810:bd8a
(due to previous errors)
Tue Jun 26 12:37:20 2018 -> Ignoring mirror 2400:cb00:2048:1::6810:b98a
(due to previous errors)
Tue Jun 26 12:37:20 2018 -> Ignoring mirror 2400:cb00:2048:1::6810:ba8a
(due to previous errors)
Tue Jun 26 12:37:20 2018 -> Ignoring mirror 2400:cb00:2048:1::6810:bb8a
(due to previous errors)
Tue Jun 26 12:37:20 2018 -> Ignoring mirror 2400:cb00:2048:1::6810:bc8a
(due to previous errors)
Tue Jun 26 12:37:20 2018 -> ERROR: Can't download daily.cvd from
db.local.clamav.net
Tue Jun 26 12:37:20 2018 -> Giving up on db.local.clamav.net...
Tue Jun 26 12:37:20 2018 -> Update failed. Your network may be down or none
of the mirrors listed in /etc/clamav/freshclam.conf is working. Check
http://www.clamav.net/doc/mirrors-faq.html for possible reasons.

Moving mirrors.dat out of the way and restarting freshclam gives the
following before giving up:

Tue Jun 26 14:33:52 2018 -> Current working dir is /var/lib/clamav
Tue Jun 26 14:33:52 2018 -> freshclam daemon 0.99.3 (OS: linux-gnu, ARCH:
x86_64, CPU: x86_64)
Tue Jun 26 14:33:52 2018 -> Max retries == 5
Tue Jun 26 14:33:52 2018 -> ClamAV update process started at Tue Jun 26
14:33:52 2018
Tue Jun 26 14:33:52 2018 -> Using IPv6 aware code
Tue Jun 26 14:33:52 2018 -> Querying current.cvd.clamav.net
Tue Jun 26 14:33:52 2018 -> TTL: 1800
Tue Jun 26 14:33:52 2018 -> Software version from DNS: 0.100.0
Tue Jun 26 14:33:52 2018 -> WARNING: Your ClamAV installation is OUTDATED!
Tue Jun 26 14:33:52 2018 -> WARNING: Local version: 0.99.3 Recommended
version: 0.100.0
Tue Jun 26 14:33:52 2018 -> DON'T PANIC! Read
http://www.clamav.net/documents/upgrading-clamav
Tue Jun 26 14:33:52 2018 -> main.cvd version from DNS: 58
Tue Jun 26 14:33:52 2018 -> main.cvd is up to date (version: 58, sigs:
4566249, f-level: 60, builder: sigmgr)
Tue Jun 26 14:33:52 2018 -> daily.cvd version from DNS: 24699
Tue Jun 26 14:33:52 2018 -> Retrieving http://db.ca.clamav.net/daily.cvd
Tue Jun 26 14:33:52 2018 -> Trying to download
http://db.ca.clamav.net/daily.cvd (IP: 104.16.189.138)
Tue Jun 26 14:33:55 2018 -> Downloading daily.cvd [100%]
Tue Jun 26 14:33:56 2018 -> WARNING: Mirror 104.16.189.138 is not
synchronized.
Tue Jun 26 14:33:56 2018 -> Querying daily.0.84.0.0.6810BD8A.ping.clamav.net
Tue Jun 26 14:33:56 2018 -> Trying again in 5 secs...
Tue Jun 26 14:34:01 2018 -> ClamAV update process started at Tue Jun 26
14:34:01 2018
Tue Jun 26 14:34:01 2018 -> Using IPv6 aware code
Tue Jun 26 14:34:01 2018 -> Querying current.cvd.clamav.net
Tue Jun 26 14:34:01 2018 -> TTL: 1791
Tue Jun 26 14:34:01 2018 -> Software version from DNS: 0.100.0
Tue Jun 26 14:34:01 2018 -> WARNING: Your ClamAV installation is OUTDATED!
Tue Jun 26 14:34:01 2018 -> WARNING: Local version: 0.99.3 Recommended
version: 0.100.0
Tue Jun 26 14:34:01 2018 -> DON'T PANIC! Read
http://www.clamav.net/documents/upgrading-clamav
Tue Jun 26 14:34:01 2018 ->

[clamav-users] Mirror Load + ClamAV Updates

2018-06-26 Thread Joel Esler (jesler)

Team --

Today we were able to add 100% of the mirror infrastructure to our CDN, 
Cloudflare.  We are currently measuring the load and evaluating the viability 
and problems (if any) with this solution.  We are currently pushing approx 12GB 
a second through their Tier 1 POP locations.

We are seeking feedback about the stability of this, or if any updates are 
failing.  (I have seen the thread that is currently on-going).


If you having problems downloading from the ClamAV mirror infrastructure, 
please delete your mirrors.dat file and start over.

--
Joel Esler
Sr. Manager
Open Source, Design, Web, and Education
Talos Group
http://www.talosintelligence.com
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Joel Esler (jesler)

Define broken in your context?  Doesn't have the file?  (Humor me, so I 
understand from your parlance)



> On Jun 26, 2018, at 2:59 PM, Paul Kosinski  wrote:
> 
> ALL of the db.xx.clamav.net (plus database.clamav.net) apparently point
> to CloudFlare, and they are ALL broken. (And have been for many hours.)
> 
> 
> On Tue, 26 Jun 2018 11:09:08 -0700
> Dave Warren  wrote:
> 
>> As that is a Cloudflare IP, I believe it possibly could represent one
>> or more backend mirrors as it may return different content depending
>> on the hostname provided.
>> 
>> On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
>>> Joel, 
>>> 
>>> I'm now getting "WARNING: Mirror 104.16.188.138 is not
>>> synchronized." when using the CDN. Could it be related to the
>>> changes made to fix this as my definitions are 3 revisions out?> 
>>> Thanks, 
>>> 
>>> On 25 June 2018 at 04:28, Joel Esler (jesler)
>>>  wrote:>> Al,
 
 
 Thanks. We are aware.  Looking into it.  
 
 Sent from my iPhone
 
 
> On Jun 24, 2018, at 23:12, Al Varnell  wrote:
> 
> Yes, but all but one was empty.
> 
> Sent from my iPad
> 
> -Al-
> 
>> On Jun 24, 2018, at 19:42, Paul Kosinski
>>  wrote:>>  >> 
>> I've gotten several daily.cvd updates in that period. They came
>> from>>  >> several IP addresses associated with
>> from>>  >> http://db.us.clamav.net/.
>> 
>> 
>> On Sun, 24 Jun 2018 18:08:59 -0700
>> Al Varnell  wrote:
>> 
>>> Just wanted to point out that there has only been one
>>> signature
>>> added>>  >>> to the VirusDB by daily updates in the last 32
>>> added>>  >>> hours.
>>> 
>>> 
>>> -Al-
> 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Paul Kosinski

ALL of the db.xx.clamav.net (plus database.clamav.net) apparently point
to CloudFlare, and they are ALL broken. (And have been for many hours.)


On Tue, 26 Jun 2018 11:09:08 -0700
Dave Warren  wrote:

> As that is a Cloudflare IP, I believe it possibly could represent one
> or more backend mirrors as it may return different content depending
> on the hostname provided.
> 
> On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
> > Joel, 
> > 
> > I'm now getting "WARNING: Mirror 104.16.188.138 is not
> > synchronized." when using the CDN. Could it be related to the
> > changes made to fix this as my definitions are 3 revisions out?> 
> > Thanks, 
> > 
> > On 25 June 2018 at 04:28, Joel Esler (jesler)
> >  wrote:>> Al,
> >> 
> >> 
> >>  Thanks. We are aware.  Looking into it.  
> >> 
> >>  Sent from my iPhone
> >> 
> >> 
> >> > On Jun 24, 2018, at 23:12, Al Varnell  wrote:
> >>  > 
> >>  > Yes, but all but one was empty.
> >>  > 
> >>  > Sent from my iPad
> >>  > 
> >>  > -Al-
> >>  > 
> >>  >> On Jun 24, 2018, at 19:42, Paul Kosinski
> >>  >>  wrote:>>  >> 
> >>  >> I've gotten several daily.cvd updates in that period. They came
> >>  >> from>>  >> several IP addresses associated with
> >>  >> from>>  >> http://db.us.clamav.net/.
> >>  >> 
> >>  >> 
> >>  >> On Sun, 24 Jun 2018 18:08:59 -0700
> >>  >> Al Varnell  wrote:
> >>  >> 
> >>  >>> Just wanted to point out that there has only been one
> >>  >>> signature
> >>  >>> added>>  >>> to the VirusDB by daily updates in the last 32
> >>  >>> added>>  >>> hours.
> >>  >>> 
> >>  >>> 
> >>  >>> -Al-

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Dave Warren

As that is a Cloudflare IP, I believe it possibly could represent one or
more backend mirrors as it may return different content depending on the
hostname provided.

On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
> Joel, 
> 
> I'm now getting "WARNING: Mirror 104.16.188.138 is not synchronized."
> when using the CDN. Could it be related to the changes made to fix
> this as my definitions are 3 revisions out?> 
> Thanks, 
> 
> On 25 June 2018 at 04:28, Joel Esler (jesler)
>  wrote:>> Al,
>> 
>> 
>>  Thanks. We are aware.  Looking into it.  
>> 
>>  Sent from my iPhone
>> 
>> 
>> > On Jun 24, 2018, at 23:12, Al Varnell  wrote:
>>  > 
>>  > Yes, but all but one was empty.
>>  > 
>>  > Sent from my iPad
>>  > 
>>  > -Al-
>>  > 
>>  >> On Jun 24, 2018, at 19:42, Paul Kosinski 
>>  >> wrote:>>  >> 
>>  >> I've gotten several daily.cvd updates in that period. They came
>>  >> from>>  >> several IP addresses associated with http://db.us.clamav.net/.
>>  >> 
>>  >> 
>>  >> On Sun, 24 Jun 2018 18:08:59 -0700
>>  >> Al Varnell  wrote:
>>  >> 
>>  >>> Just wanted to point out that there has only been one signature
>>  >>> added>>  >>> to the VirusDB by daily updates in the last 32 hours.
>>  >>> 
>>  >>> 
>>  >>> -Al-
>>  >> ___
>>  >> clamav-users mailing list
>>  >> clamav-users@lists.clamav.net
>>  >> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>  >> 
>>  >> 
>>  >> Help us build a comprehensive ClamAV guide:
>>  >> https://github.com/vrtadmin/clamav-faq
>>  >> 
>>  >> http://www.clamav.net/contact.html#ml
>>  > ___
>>  > clamav-users mailing list
>>  > clamav-users@lists.clamav.net
>>  > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>  > 
>>  > 
>>  > Help us build a comprehensive ClamAV guide:
>>  > https://github.com/vrtadmin/clamav-faq
>>  > 
>>  > http://www.clamav.net/contact.html#ml
>>  ___
>>  clamav-users mailing list
>> clamav-users@lists.clamav.net
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>> 
>> 
>>  Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> _
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>  
>  
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>  
> http://www.clamav.net/contact.html#ml

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Michael Da Cova

I get mirror issue with 104.16.188.138 often

From: clamav-users  On Behalf Of Robin 
Bourne
Sent: 26 June 2018 14:42
To: ClamAV users ML 
Subject: Re: [clamav-users] VirusDB Updates Broken?

Joel,

I'm now getting "WARNING: Mirror 104.16.188.138 is not synchronized." when 
using the CDN. Could it be related to the changes made to fix this as my 
definitions are 3 revisions out?

Thanks,

On 25 June 2018 at 04:28, Joel Esler (jesler) 
mailto:jes...@cisco.com>> wrote:
Al,


Thanks. We are aware.  Looking into it.

Sent from my iPhone

> On Jun 24, 2018, at 23:12, Al Varnell 
> mailto:alvarn...@mac.com>> wrote:
>
> Yes, but all but one was empty.
>
> Sent from my iPad
>
> -Al-
>
>> On Jun 24, 2018, at 19:42, Paul Kosinski 
>> mailto:clamav-us...@iment.com>> wrote:
>>
>> I've gotten several daily.cvd updates in that period. They came from
>> several IP addresses associated with http://db.us.clamav.net/.
>>
>>
>> On Sun, 24 Jun 2018 18:08:59 -0700
>> Al Varnell mailto:alvarn...@mac.com>> wrote:
>>
>>> Just wanted to point out that there has only been one signature added
>>> to the VirusDB by daily updates in the last 32 hours.
>>>
>>>
>>> -Al-
>> ___
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Robin Bourne

Joel,

I'm now getting "WARNING: Mirror 104.16.188.138 is not synchronized." when
using the CDN. Could it be related to the changes made to fix this as my
definitions are 3 revisions out?

Thanks,

On 25 June 2018 at 04:28, Joel Esler (jesler)  wrote:

> Al,
>
>
> Thanks. We are aware.  Looking into it.
>
> Sent from my iPhone
>
> > On Jun 24, 2018, at 23:12, Al Varnell  wrote:
> >
> > Yes, but all but one was empty.
> >
> > Sent from my iPad
> >
> > -Al-
> >
> >> On Jun 24, 2018, at 19:42, Paul Kosinski 
> wrote:
> >>
> >> I've gotten several daily.cvd updates in that period. They came from
> >> several IP addresses associated with http://db.us.clamav.net/.
> >>
> >>
> >> On Sun, 24 Jun 2018 18:08:59 -0700
> >> Al Varnell  wrote:
> >>
> >>> Just wanted to point out that there has only been one signature added
> >>> to the VirusDB by daily updates in the last 32 hours.
> >>>
> >>>
> >>> -Al-
> >> ___
> >> clamav-users mailing list
> >> clamav-users@lists.clamav.net
> >> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >>
> >>
> >> Help us build a comprehensive ClamAV guide:
> >> https://github.com/vrtadmin/clamav-faq
> >>
> >> http://www.clamav.net/contact.html#ml
> > ___
> > clamav-users mailing list
> > clamav-users@lists.clamav.net
> > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >
> >
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] Mirror Load + ClamAV Updates

Re: [clamav-users] Mirror Load + ClamAV Updates

Re: [clamav-users] Mirror Load + ClamAV Updates

[clamav-users] Mirror Load + ClamAV Updates

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

14 matches

Site Navigation

Mail list logo

Footer information