Re: [Clamav-users] database.clamav.net resolution
Hello Damian Menscher, sorry for the late reply This points me to random mirrors around the world. I'd have expected to resolve to db.us.clamav.net, and get mirrors within the US. Everything still works, but I wanted to report it since it should probably be fixed. Or is this something I was supposed to configure (the you SHOULD NOT change it discouraged me)? As we say in the doc, we only _attempt_ to redirect clients to the closest mirror. The closest server (geographically speaking) is not necessarily the best mirror for you to use, so there is no need to try hard to redirect a client to the closest mirror. We grouped our mirrors like this just to avoid using 53/tcp replies to dns queries. Since the number of mirrors keeps growing, in the near future we may need to change this approach in favour of another one based on country codes. You can already start using the following hostname as a clamav mirror if you like: db.TWOLETTERCOUNTRYCODE.clamav.net Right now most of them are just aliases for db.america.clamav.net, db.europe.clamav.net and db.asia.clamav.net Please let me know if you encounter any difficulties. Best regards -- Luca Gibelli ([EMAIL PROTECTED]) - http://www.ClamAV.net - A GPL virus scanner PGP Key Fingerprint: C782 121E 8C3A 90E3 7A87 D802 6277 8FF4 5EFC 5582 PGP Key Available on: Key Servers || http://www.clamav.net/gpg/nervoso.gpg --- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] database.clamav.net resolution
Damian Menscher wrote: On Tue, 15 Jun 2004, Fajar A. Nugraha wrote: Ryan Moore wrote: Damian Menscher wrote: What do you get when you do host database.clamav.net ? Yea, doh. Is the DNS supposed to return a RR based on your location? Actually, for database.clamav.net, the answer is yes. Or to be specific, based on your IP address. It's an effort to balance mirror load among mirrors. Ok, so we've established that it's supposed to figure out your region based on your IP, and we've established that for several of us it is failing. Why? Anyone know how that was set up? The primary reason database.clamav.net was split into several regional zones was to avoid gigantic DNS reply, which would require TCP instead of UDP. Instead of returning all mirror IP addressess, it returns only several addressess closest to you (based on your IP region). Some firewall admins block the DNS TCP port, which (back in the old days) makes the command host database.clamav.net failed. The current configuration SHOULD solve this problem. e.g. If you get IP lists for database.clamav.net that means you don't have the DNS TCP problem. I don't think I know enough about DNS to troubleshoot this (I'm pushing the issue because it seems like the other mirrors are going to be overloaded if this is a common problem.) the other mirrors are selected from mirrors with plenty of bandwidth, so overloading should not be an issue. Regards, Fajar -- Don't use GIF. Use PNG instead http://www.gnu.org/philosophy/gif.html --- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] database.clamav.net resolution
On Tue, 15 Jun 2004, Fajar A. Nugraha wrote: Damian Menscher wrote: On Tue, 15 Jun 2004, Fajar A. Nugraha wrote: Ryan Moore wrote: Damian Menscher wrote: What do you get when you do host database.clamav.net ? Yea, doh. Is the DNS supposed to return a RR based on your location? Actually, for database.clamav.net, the answer is yes. Or to be specific, based on your IP address. It's an effort to balance mirror load among mirrors. Ok, so we've established that it's supposed to figure out your region based on your IP, and we've established that for several of us it is failing. Why? Anyone know how that was set up? The primary reason database.clamav.net was split into several regional zones was to avoid gigantic DNS reply, which would require TCP instead of UDP. Instead of returning all mirror IP addressess, it returns only several addressess closest to you (based on your IP region). Would someone mind explaining how it knows what region each IP address should be in? I'm guessing it's just something simple, like having the top-level mirrors point different places in different regions, so it depends who you peer off of? I just find the following results odd: 69.212.*.* Residential DSL connection -- america 130.126.*.* University -- other 128.174.*.* Same University-- other 131.225.*.* US National Lab-- other Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- --- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] database.clamav.net resolution
On Tuesday 15 June 2004 4:35 pm, Damian Menscher wrote: The primary reason database.clamav.net was split into several regional zones was to avoid gigantic DNS reply, which would require TCP instead of UDP. Instead of returning all mirror IP addressess, it returns only several addressess closest to you (based on your IP region). Would someone mind explaining how it knows what region each IP address should be in? I'm guessing it's just something simple, like having the top-level mirrors point different places in different regions, so it depends who you peer off of? My guess is that it's based on split DNS - multiple views, so you get different answers depending on where (in IP address space) you're asking the question from. However, I didn't set up the system, so I don't know this - it's just the way I'd do it if I had to set up something similar. Regards, Antony. -- Black holes are where God divided by zero. - Steven Wright Please reply to the list; please don't CC me. --- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] database.clamav.net resolution
My guess is that it's based on split DNS - multiple views, so you get different answers depending on where (in IP address space) you're asking the question from. You are right. --- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] database.clamav.net resolution
On Sun, 13 Jun 2004, Ryan Moore wrote: Damian Menscher wrote: I'm at a .edu in the middle of the US, but I see: $ host database.clamav.net database.clamav.net is an alias for db.local.clamav.net. db.local.clamav.net is an alias for db.other.clamav.net. This points me to random mirrors around the world. I'd have expected to resolve to db.us.clamav.net, and get mirrors within the US. Everything still works, but I wanted to report it since it should probably be fixed. Or is this something I was supposed to configure (the you SHOULD NOT change it discouraged me)? I do get a listing of addresses when I resolve db.us.clamav.net, though I didn't check the whois records for all of them to see where they were located, but I'd assume they're in the US. I did check a few and they were indeed in the US. $ host db.us.clamav.net db.us.clamav.net is an alias for db.america.clamav.net. You missed the point. What do you get when you do host database.clamav.net ? Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] database.clamav.net resolution
Quoting Damian Menscher [EMAIL PROTECTED]: On Sun, 13 Jun 2004, Ryan Moore wrote: Damian Menscher wrote: I'm at a .edu in the middle of the US, but I see: $ host database.clamav.net database.clamav.net is an alias for db.local.clamav.net. db.local.clamav.net is an alias for db.other.clamav.net. This points me to random mirrors around the world. I'd have expected to resolve to db.us.clamav.net, and get mirrors within the US. Everything still works, but I wanted to report it since it should probably be fixed. Or is this something I was supposed to configure (the you SHOULD NOT change it discouraged me)? I do get a listing of addresses when I resolve db.us.clamav.net, though I didn't check the whois records for all of them to see where they were located, but I'd assume they're in the US. I did check a few and they were indeed in the US. $ host db.us.clamav.net db.us.clamav.net is an alias for db.america.clamav.net. You missed the point. What do you get when you do host database.clamav.net ? Im in NY and i get: [EMAIL PROTECTED] jmaul]# host database.clamav.net database.clamav.net is an alias for db.local.clamav.net. db.local.clamav.net is an alias for db.other.clamav.net. db.other.clamav.net has address 212.31.160.239 db.other.clamav.net has address 212.113.16.74 db.other.clamav.net has address 213.73.255.243 db.other.clamav.net has address 24.244.193.21 db.other.clamav.net has address 64.18.103.6 db.other.clamav.net has address 65.75.154.69 db.other.clamav.net has address 80.69.67.3 db.other.clamav.net has address 129.64.99.170 db.other.clamav.net has address 193.1.219.100 db.other.clamav.net has address 209.8.40.140 db.other.clamav.net has address 209.204.175.217 I only checked the first 2 but they appear to be in Sweden and England. Although, after running host database.clamav.net a second time, i get: [EMAIL PROTECTED] jmaul]# host database.clamav.net database.clamav.net is an alias for db.local.clamav.net. db.local.clamav.net is an alias for db.other.clamav.net. db.other.clamav.net has address 64.18.103.6 db.other.clamav.net has address 65.75.154.69 db.other.clamav.net has address 80.69.67.3 db.other.clamav.net has address 129.64.99.170 db.other.clamav.net has address 193.1.219.100 db.other.clamav.net has address 209.8.40.140 db.other.clamav.net has address 209.204.175.217 db.other.clamav.net has address 212.31.160.239 db.other.clamav.net has address 212.113.16.74 db.other.clamav.net has address 213.73.255.243 db.other.clamav.net has address 24.244.193.21 I checked the first 2 and they are indeed in the United States. But the next couple arent. It doesnt appear to be based on your location and if it is supposed to be, then it isnt working. Jim --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] database.clamav.net resolution
Damian Menscher wrote: You missed the point. What do you get when you do host database.clamav.net ? Damian Menscher Yea, doh. Is the DNS supposed to return a RR based on your location? I was under the impression that no, it wouldn't and you can choose to use the regional zones if you so desire, which do indeed work. -- Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net --- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] database.clamav.net resolution
Ryan Moore wrote: Damian Menscher wrote: What do you get when you do host database.clamav.net ? Yea, doh. Is the DNS supposed to return a RR based on your location? Actually, for database.clamav.net, the answer is yes. Or to be specific, based on your IP address. It's an effort to balance mirror load among mirrors. I was under the impression that no, it wouldn't and you can choose to use the regional zones if you so desire, which do indeed work. You could always choose your regional mirror manually. You could even tell freshclam to go to a specific single mirrror. Regards, Fajar -- Please avoid sending me Microsoft Office attachments. See http://www.newsforge.com/software/04/03/27/0134204.shtml --- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] database.clamav.net resolution
On Tue, 15 Jun 2004, Fajar A. Nugraha wrote: Ryan Moore wrote: Damian Menscher wrote: What do you get when you do host database.clamav.net ? Yea, doh. Is the DNS supposed to return a RR based on your location? Actually, for database.clamav.net, the answer is yes. Or to be specific, based on your IP address. It's an effort to balance mirror load among mirrors. Ok, so we've established that it's supposed to figure out your region based on your IP, and we've established that for several of us it is failing. Why? Anyone know how that was set up? I don't think I know enough about DNS to troubleshoot this (I'm pushing the issue because it seems like the other mirrors are going to be overloaded if this is a common problem.) Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- --- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] database.clamav.net resolution
I'm at a .edu in the middle of the US, but I see: $ host database.clamav.net database.clamav.net is an alias for db.local.clamav.net. db.local.clamav.net is an alias for db.other.clamav.net. This points me to random mirrors around the world. I'd have expected to resolve to db.us.clamav.net, and get mirrors within the US. Everything still works, but I wanted to report it since it should probably be fixed. Or is this something I was supposed to configure (the you SHOULD NOT change it discouraged me)? Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] database.clamav.net resolution
Damian Menscher wrote: I'm at a .edu in the middle of the US, but I see: $ host database.clamav.net database.clamav.net is an alias for db.local.clamav.net. db.local.clamav.net is an alias for db.other.clamav.net. This points me to random mirrors around the world. I'd have expected to resolve to db.us.clamav.net, and get mirrors within the US. Everything still works, but I wanted to report it since it should probably be fixed. Or is this something I was supposed to configure (the you SHOULD NOT change it discouraged me)? Damian Menscher I do get a listing of addresses when I resolve db.us.clamav.net, though I didn't check the whois records for all of them to see where they were located, but I'd assume they're in the US. I did check a few and they were indeed in the US. $ host db.us.clamav.net db.us.clamav.net is an alias for db.america.clamav.net. -- Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
