Re: [clamav-users] Warning in ClamAV update process

2014-09-13 Thread Gene Heskett
On Saturday 13 September 2014 12:14:33 Scott Kitterman did opine
And Gene did reply:
> On Saturday, September 13, 2014 12:07:46 Gene Heskett wrote:
> > And then even more time to convince TPTB in charge of the major
> > distributions, that the upgrade needs to find its way into their
> > repo's. I am on an older ubuntu 10.04.4 LTS install, with enough X
> > and kde to get what I want, but that also has its drawbacks as I am
> > stuck with a patched up 98.1.
> > 
> > This is also a problem that needs to be addressed in closed door
> > sessions with the Ubuntu's, SuSe's and Red Hat's of the industry,
> > building a fire under their packagers occasionally.  Its a cost of
> > doing business, although I am not 100% aware of who is paying the
> > bills for this project, I read rumors that might be just that so I
> > won't propagate them.
> 
> Hello,
> 
> I'm the primary packager for clamav on Ubuntu.  Getting the current
> clamav packages to work on an older system like 10.04 takes some work
> that I haven't had time to do.
> 
> I'm a volunteer developer, so your ability to find someone who will
> like a fire under me is probably somewhat limited.  I had planned on
> working on today, but reading crap like this is totally demotivating. 
> I'll probably spend the time on paid work instead.
> 
> Scott K

I can't say as I'd blame you.  Paid work in this "free" software arena is 
king.

My caterwauling about it is NOT a show stopper here because database 
backwards compatibility has in fact been well maintained.  It appears I 
worded it poorly.  As its been 40+years since I worked by the hour, that 
phrase about building a fire has become a part of the business language.

My apology's.
 
Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Warning in ClamAV update process

2014-09-13 Thread Scott Kitterman
On Saturday, September 13, 2014 12:07:46 Gene Heskett wrote:
> And then even more time to convince TPTB in charge of the major 
> distributions, that the upgrade needs to find its way into their repo's.  
> I am on an older ubuntu 10.04.4 LTS install, with enough X and kde to get 
> what I want, but that also has its drawbacks as I am stuck with a patched 
> up 98.1.
> 
> This is also a problem that needs to be addressed in closed door sessions 
> with the Ubuntu's, SuSe's and Red Hat's of the industry, building a fire 
> under their packagers occasionally.  Its a cost of doing business, 
> although I am not 100% aware of who is paying the bills for this project, 
> I read rumors that might be just that so I won't propagate them.

Hello,

I'm the primary packager for clamav on Ubuntu.  Getting the current clamav 
packages to work on an older system like 10.04 takes some work that I haven't 
had time to do.

I'm a volunteer developer, so your ability to find someone who will like a fire 
under me is probably somewhat limited.  I had planned on working on today, but 
reading crap like this is totally demotivating.  I'll probably spend the time 
on paid work instead.

Scott K
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Warning in ClamAV update process

2014-09-13 Thread Gene Heskett
On Thursday 11 September 2014 18:16:49 Joel Esler (jesler) did opine
And Gene did reply:
> For far too long I feel like, we’re throwing band-aids on things in
> order to “just get them upâ€‌
> 
> I, and I am sure, all of you, don’t want band-aids, you want reliable
> solutions that are better in the long run and robust.  Sometimes,
> unfortunately, that takes longer to design, code, and roll out.

And then even more time to convince TPTB in charge of the major 
distributions, that the upgrade needs to find its way into their repo's.  
I am on an older ubuntu 10.04.4 LTS install, with enough X and kde to get 
what I want, but that also has its drawbacks as I am stuck with a patched 
up 98.1.

This is also a problem that needs to be addressed in closed door sessions 
with the Ubuntu's, SuSe's and Red Hat's of the industry, building a fire 
under their packagers occasionally.  Its a cost of doing business, 
although I am not 100% aware of who is paying the bills for this project, 
I read rumors that might be just that so I won't propagate them.

As I approach my 80th in about 6 weeks I am very well aware that TANSTAAFL 
applies here just as it applies to any endeavor.  Its as near a universal 
rule as I know, and while I am not rich by any means, I have been known to 
support, in small amounts, worthwhile open source projects.  An annual 
club membership due is in the same category.
  
> For instance, on our backend, the system that collects the actual
> malware samples, stores them, de-duplicates them, deals with the
> collection, signatures, package distribution, etc, went from
> collection, on average, 300k samples a day (unique, after
> de-duplication), to now just shy of 1M a day.

Definitely a scaling problem, existing hardware can only do so much before 
you have to throw both money for bigger iron and that bigger iron at the 
job.
 
> As you can imagine this introduces all sorts of interesting issues,
> aside from the simplest thing of just plain storage.  So this system
> had to be completely redesigned.
> 
> The website (ClamAV.net) had to be redesigned.

I see that, an improvement in the graphical face was needed.

> ClamAV, the actual code, has had a ton of work done on it, not only to
> fix bugs and issues, but to introduce new features.  All the while
> with an increasing user base of several thousand users per day.
> 
> So, we’re working to make everything a better experience, and I know
> it’s painful right now, and we apologize for it, but hopefully the
> light at the end of the tunnel will make it all worth it.  It’s
> costing us millions of dollars, but we’re going to do it, and
> we’re going to do it right.
> 
> --
> Joel Esler
> Open Source Manager
> Threat Intelligence Team Lead
> Talos

I also didn't intend to throw a 5 gallon can of K2 on the fire here, the 
msg I'll snip was intended to show some concern for the pace of such 
things as the mirror.html being regenerated, probably with a script that 
regenerates it anytime something gets changed.  Something like that is 
trivial to maintain once the script has been written.

Those ARE the things we, the users, see right up front, and when not fixed 
in the open source fashion of perhaps an hour or so, makes the user, 
particularly the newbie understandably a bit wary.

Thank you Joel, for taking the time to respond in some detail, its 
appreciated by quite a few here I'd imagine.

[...]

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Warning in ClamAV update process

2014-09-13 Thread Joel Esler (jesler)
For far too long I feel like, we’re throwing band-aids on things in order to 
“just get them up”

I, and I am sure, all of you, don’t want band-aids, you want reliable solutions 
that are better in the long run and robust.  Sometimes, unfortunately, that 
takes longer to design, code, and roll out.

For instance, on our backend, the system that collects the actual malware 
samples, stores them, de-duplicates them, deals with the collection, 
signatures, package distribution, etc, went from collection, on average, 300k 
samples a day (unique, after de-duplication), to now just shy of 1M a day.

As you can imagine this introduces all sorts of interesting issues, aside from 
the simplest thing of just plain storage.  So this system had to be completely 
redesigned.

The website (ClamAV.net) had to be redesigned.
ClamAV, the actual code, has had a ton of work done on it, not only to fix bugs 
and issues, but to introduce new features.  All the while with an increasing 
user base of several thousand users per day.

So, we’re working to make everything a better experience, and I know it’s 
painful right now, and we apologize for it, but hopefully the light at the end 
of the tunnel will make it all worth it.  It’s costing us millions of dollars, 
but we’re going to do it, and we’re going to do it right.

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos

On Sep 11, 2014, at 5:39 PM, Gene Heskett 
mailto:ghesk...@wdtv.com>> wrote:

On Thursday 11 September 2014 16:25:27 Joel Esler (jesler) did opine
And Gene did reply:
On Sep 11, 2014, at 7:15 AM, Gene Heskett
mailto:ghesk...@wdtv.com>> wrote:

On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine
And Gene did reply:
Den 2014-09-11 09:59, Al Varnell skrev:
On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote:
I always get these warnings and it is always ip 192.121.13.5
Any way to avoid these warnings?

That mirror appear to be located in Sweden. Depending on where in the
world you are located, you _might_ see improvement by changing the
following in freshclam.conf:
Yes I live in Sweden, has tried with Database Mirror
db.se.clamav.net and it gets 
the same
results. Always the same server that gives error, maybe not available
anymore.

Question for ClamAVآ® team.  Have you done away with the Mirror Status
page? (was http://www.clamav.net/mirrors.html)  I used it quite
often to troubleshoot issues such as this one.

I get error 404 for this page http://www.clamav.net/mirrors.html
perhaps also not available anymore.

Thanks Al for your answers!

I also am getting a 404, but the rotating red devils head graphic is a
new image to me.  Since its a giant version of the same image at
http://www.clamav.net/contact.html#ml, I have to assume that the
mirrors.html file is missing from the 
clamav.net>
server.

Well, it doesn’t exist on the new server.  I just answered this in
another thread as well, but this page (and the stats page) weren’t
ready for the new site yet.  We’re still working in it.


It looks to me as if the left hand is not communicating with the right
hand, and is systematically trying to destroy clamav.  We expect that
from M$, but your new management does not seem to be on the same page
as its users have been for years.

I don’t think there is anyone “systematically trying to destroy
clamavâ€‌, and take issue with that statement.

What can I do better to communicate to you?  My statistics on usage and
downloads don’t illustrate what you are complaining about, so what
can I do to make it better for you?

I am not currently, and haven't for about a year, had a problem with
freshclam.  My comment is based as much on the repeat nature of this
particular problem as its reported here on this list.

But there is also something else to consider, and that is the overflow in
the BGP in the master network dns servers.  I cannot, and have not been
able to access the www.uspo.gov site for several days as 
the dns servers I
get from my cable provider are suffering from this same overflow
condition, so the site does not exist.  So I can't "traceroute" a package
thru the USPO

In case you're not aware of that problem, here is a link to the source of
the story on zdnet.



--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeachi

Re: [clamav-users] Warning in ClamAV update process

2014-09-11 Thread Gene Heskett
On Thursday 11 September 2014 16:25:27 Joel Esler (jesler) did opine
And Gene did reply:
> On Sep 11, 2014, at 7:15 AM, Gene Heskett
> mailto:ghesk...@wdtv.com>> wrote:
> 
> On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine
> And Gene did reply:
> Den 2014-09-11 09:59, Al Varnell skrev:
> On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote:
> I always get these warnings and it is always ip 192.121.13.5
> Any way to avoid these warnings?
> 
> That mirror appear to be located in Sweden. Depending on where in the
> world you are located, you _might_ see improvement by changing the
> following in freshclam.conf:
> Yes I live in Sweden, has tried with Database Mirror
> db.se.clamav.net and it gets the same
> results. Always the same server that gives error, maybe not available
> anymore.
> 
> Question for ClamAVآ® team.  Have you done away with the Mirror Status
> page? (was http://www.clamav.net/mirrors.html)  I used it quite
> often to troubleshoot issues such as this one.
> 
> I get error 404 for this page http://www.clamav.net/mirrors.html
> perhaps also not available anymore.
> 
> Thanks Al for your answers!
> 
> I also am getting a 404, but the rotating red devils head graphic is a
> new image to me.  Since its a giant version of the same image at
> http://www.clamav.net/contact.html#ml, I have to assume that the
> mirrors.html file is missing from the clamav.net
> server.
> 
> Well, it doesn’t exist on the new server.  I just answered this in
> another thread as well, but this page (and the stats page) weren’t
> ready for the new site yet.  We’re still working in it.
> 
> 
> It looks to me as if the left hand is not communicating with the right
> hand, and is systematically trying to destroy clamav.  We expect that
> from M$, but your new management does not seem to be on the same page
> as its users have been for years.
> 
> I don’t think there is anyone “systematically trying to destroy
> clamavâ€‌, and take issue with that statement.
> 
> What can I do better to communicate to you?  My statistics on usage and
> downloads don’t illustrate what you are complaining about, so what
> can I do to make it better for you?
>
I am not currently, and haven't for about a year, had a problem with 
freshclam.  My comment is based as much on the repeat nature of this 
particular problem as its reported here on this list.

But there is also something else to consider, and that is the overflow in 
the BGP in the master network dns servers.  I cannot, and have not been 
able to access the www.uspo.gov site for several days as the dns servers I 
get from my cable provider are suffering from this same overflow 
condition, so the site does not exist.  So I can't "traceroute" a package 
thru the USPO

In case you're not aware of that problem, here is a link to the source of 
the story on zdnet.



> --
> Joel Esler
> Open Source Manager
> Threat Intelligence Team Lead
> Talos
> 
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Warning in ClamAV update process

2014-09-11 Thread Joel Esler (jesler)

> On Sep 11, 2014, at 4:36 PM, Bowie Bailey  wrote:
> 
> On 9/11/2014 4:25 PM, Joel Esler (jesler) wrote:
>> On Sep 11, 2014, at 7:15 AM, Gene Heskett 
>> mailto:ghesk...@wdtv.com>> wrote:
>> 
>> On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine
>> And Gene did reply:
>> Den 2014-09-11 09:59, Al Varnell skrev:
>> On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote:
>> I always get these warnings and it is always ip 192.121.13.5
>> Any way to avoid these warnings?
>> 
>> That mirror appear to be located in Sweden. Depending on where in the
>> world you are located, you _might_ see improvement by changing the
>> following in freshclam.conf:
>> Yes I live in Sweden, has tried with Database Mirror 
>> db.se.clamav.net
>> and it gets the same results. Always the same server that gives error,
>> maybe not available anymore.
>> 
>> Question for ClamAV® team.  Have you done away with the Mirror Status
>> page? (was http://www.clamav.net/mirrors.html)  I used it quite
>> often to troubleshoot issues such as this one.
>> 
>> I get error 404 for this page http://www.clamav.net/mirrors.html
>> perhaps also not available anymore.
>> 
>> Thanks Al for your answers!
>> 
>> I also am getting a 404, but the rotating red devils head graphic is a new
>> image to me.  Since its a giant version of the same image at
>> http://www.clamav.net/contact.html#ml, I have to assume that the
>> mirrors.html file is missing from the clamav.net server.
>> 
>> Well, it doesn’t exist on the new server.  I just answered this in another 
>> thread as well, but this page (and the stats page) weren’t ready for the new 
>> site yet.  We’re still working in it.
>> 
>> 
>> It looks to me as if the left hand is not communicating with the right
>> hand, and is systematically trying to destroy clamav.  We expect that from
>> M$, but your new management does not seem to be on the same page as its
>> users have been for years.
>> 
>> I don’t think there is anyone “systematically trying to destroy clamav”, and 
>> take issue with that statement.
>> 
>> What can I do better to communicate to you?  My statistics on usage and 
>> downloads don’t illustrate what you are complaining about, so what can I do 
>> to make it better for you?
> 
> Step one would be fixing your email program so that it properly marks quoted 
> text.  Your replies are getting mixed in with the quoted text so that we 
> can't tell where the quote ends and your response begins.
> 
> Take a look above.  There are comments from Gene Heskett, Tommy Berglund, Al 
> Varnell, and yourself.  Can you tell who is saying what?

Yeah, beta email client.  :)


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Warning in ClamAV update process

2014-09-11 Thread Bowie Bailey

On 9/11/2014 4:25 PM, Joel Esler (jesler) wrote:

On Sep 11, 2014, at 7:15 AM, Gene Heskett 
mailto:ghesk...@wdtv.com>> wrote:

On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine
And Gene did reply:
Den 2014-09-11 09:59, Al Varnell skrev:
On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote:
I always get these warnings and it is always ip 192.121.13.5
Any way to avoid these warnings?

That mirror appear to be located in Sweden. Depending on where in the
world you are located, you _might_ see improvement by changing the
following in freshclam.conf:
Yes I live in Sweden, has tried with Database Mirror 
db.se.clamav.net
and it gets the same results. Always the same server that gives error,
maybe not available anymore.

Question for ClamAV® team.  Have you done away with the Mirror Status
page? (was http://www.clamav.net/mirrors.html)  I used it quite
often to troubleshoot issues such as this one.

I get error 404 for this page http://www.clamav.net/mirrors.html
perhaps also not available anymore.

Thanks Al for your answers!

I also am getting a 404, but the rotating red devils head graphic is a new
image to me.  Since its a giant version of the same image at
http://www.clamav.net/contact.html#ml, I have to assume that the
mirrors.html file is missing from the clamav.net server.

Well, it doesn’t exist on the new server.  I just answered this in another 
thread as well, but this page (and the stats page) weren’t ready for the new 
site yet.  We’re still working in it.


It looks to me as if the left hand is not communicating with the right
hand, and is systematically trying to destroy clamav.  We expect that from
M$, but your new management does not seem to be on the same page as its
users have been for years.

I don’t think there is anyone “systematically trying to destroy clamav”, and 
take issue with that statement.

What can I do better to communicate to you?  My statistics on usage and 
downloads don’t illustrate what you are complaining about, so what can I do to 
make it better for you?


Step one would be fixing your email program so that it properly marks 
quoted text.  Your replies are getting mixed in with the quoted text so 
that we can't tell where the quote ends and your response begins.


Take a look above.  There are comments from Gene Heskett, Tommy 
Berglund, Al Varnell, and yourself.  Can you tell who is saying what?


--
Bowie
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Warning in ClamAV update process

2014-09-11 Thread Joel Esler (jesler)
On Sep 11, 2014, at 7:15 AM, Gene Heskett 
mailto:ghesk...@wdtv.com>> wrote:

On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine
And Gene did reply:
Den 2014-09-11 09:59, Al Varnell skrev:
On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote:
I always get these warnings and it is always ip 192.121.13.5
Any way to avoid these warnings?

That mirror appear to be located in Sweden. Depending on where in the
world you are located, you _might_ see improvement by changing the
following in freshclam.conf:
Yes I live in Sweden, has tried with Database Mirror 
db.se.clamav.net
and it gets the same results. Always the same server that gives error,
maybe not available anymore.

Question for ClamAV® team.  Have you done away with the Mirror Status
page? (was http://www.clamav.net/mirrors.html)  I used it quite
often to troubleshoot issues such as this one.

I get error 404 for this page http://www.clamav.net/mirrors.html
perhaps also not available anymore.

Thanks Al for your answers!

I also am getting a 404, but the rotating red devils head graphic is a new
image to me.  Since its a giant version of the same image at
http://www.clamav.net/contact.html#ml, I have to assume that the
mirrors.html file is missing from the clamav.net server.

Well, it doesn’t exist on the new server.  I just answered this in another 
thread as well, but this page (and the stats page) weren’t ready for the new 
site yet.  We’re still working in it.


It looks to me as if the left hand is not communicating with the right
hand, and is systematically trying to destroy clamav.  We expect that from
M$, but your new management does not seem to be on the same page as its
users have been for years.

I don’t think there is anyone “systematically trying to destroy clamav”, and 
take issue with that statement.

What can I do better to communicate to you?  My statistics on usage and 
downloads don’t illustrate what you are complaining about, so what can I do to 
make it better for you?

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Warning in ClamAV update process

2014-09-11 Thread Joel Esler (jesler)

On Sep 11, 2014, at 5:10 AM, Tommy Berglund 
mailto:to...@fam-berglund.eu>> wrote:

Den 2014-09-11 09:59, Al Varnell skrev:

On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote:

I always get these warnings and it is always ip 192.121.13.5
Any way to avoid these warnings?

That mirror appear to be located in Sweden. Depending on where in the world you 
are located, you _might_ see improvement by changing the following in 
freshclam.conf:

Yes I live in Sweden, has tried with Database Mirror 
db.se.clamav.net and it gets the same results. Always 
the same server that gives error, maybe not available anymore.

Question for ClamAV® team.  Have you done away with the Mirror Status page? 
(was http://www.clamav.net/mirrors.html)  I used it quite often to troubleshoot 
issues such as this one.

I get error 404 for this page http://www.clamav.net/mirrors.html perhaps also 
not available anymore.


The mirrors page and the stats page we’re working on (phase 2) for the site.  
We have a different way we’re going to be displaying the stats and mirrors, and 
it isn’t ready yet.  Sorry for the inconvenience for anyone affected.

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Warning in ClamAV update process

2014-09-11 Thread Gene Heskett
On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine
And Gene did reply:
> Den 2014-09-11 09:59, Al Varnell skrev:
> > On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote:
> >> I always get these warnings and it is always ip 192.121.13.5
> >> Any way to avoid these warnings?
> > 
> > That mirror appear to be located in Sweden. Depending on where in the 
world you are located, you _might_ see improvement by changing the 
following in freshclam.conf:
> Yes I live in Sweden, has tried with Database Mirror db.se.clamav.net
> and it gets the same results. Always the same server that gives error,
> maybe not available anymore.
> 
> > Question for ClamAV® team.  Have you done away with the Mirror Status
> > page? (was http://www.clamav.net/mirrors.html)  I used it quite
> > often to troubleshoot issues such as this one.
> 
> I get error 404 for this page http://www.clamav.net/mirrors.html
> perhaps also not available anymore.
> 
> Thanks Al for your answers!

I also am getting a 404, but the rotating red devils head graphic is a new 
image to me.  Since its a giant version of the same image at 
http://www.clamav.net/contact.html#ml, I have to assume that the 
mirrors.html file is missing from the clamav.net server.

It looks to me as if the left hand is not communicating with the right 
hand, and is systematically trying to destroy clamav.  We expect that from 
M$, but your new management does not seem to be on the same page as its 
users have been for years.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Warning in ClamAV update process

2014-09-11 Thread Tommy Berglund

Den 2014-09-11 09:59, Al Varnell skrev:


On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote:


I always get these warnings and it is always ip 192.121.13.5
Any way to avoid these warnings?


That mirror appear to be located in Sweden. Depending on where in the world you 
are located, you _might_ see improvement by changing the following in 
freshclam.conf:

Yes I live in Sweden, has tried with Database Mirror db.se.clamav.net 
and it gets the same results. Always the same server that gives error, 
maybe not available anymore.


Question for ClamAV® team.  Have you done away with the Mirror Status page? 
(was http://www.clamav.net/mirrors.html)  I used it quite often to troubleshoot 
issues such as this one.

I get error 404 for this page http://www.clamav.net/mirrors.html 
perhaps also not available anymore.


Thanks Al for your answers!
--
Regards
tommy
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Warning in ClamAV update process

2014-09-11 Thread Al Varnell

On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote:
> 
> I always get these warnings and it is always ip 192.121.13.5
> Any way to avoid these warnings?

That mirror appear to be located in Sweden. Depending on where in the world you 
are located, you _might_ see improvement by changing the following in 
freshclam.conf:

# Country of origin of malware/detection statistics (for statistical
# purposes only). The statistics collector at ClamAV.net will look up
# your IP address to determine the geographical origin of the malware
# reported by your installation. If this installation is mainly used to
# scan data which comes from a different location, please enable this
# option and enter a two-letter code (see http://www.iana.org/domains/root/db/)
# of the country of origin.
# Default: disabled
#DetectionStatsCountry country-code
DetectionStatsCountry XX

Freshclam usually does a pretty good job of figuring out where you are based on 
your IP address and match you to closest mirrors, but that doesn’t always work. 
 There are also occasions when a mirror will block IP addresses outside of 
nation boundaries.  They aren’t supposed to, but I know it has happened.

===

Question for ClamAV® team.  Have you done away with the Mirror Status page? 
(was http://www.clamav.net/mirrors.html)  I used it quite often to troubleshoot 
issues such as this one.


-Al-
-- 
Al Varnell
Mountain View, CA




___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] Warning in ClamAV update process

2014-09-11 Thread Tommy Berglund

I always get these warnings and it is always ip 192.121.13.5
Any way to avoid these warnings?

Debian 7.0
clamav 0.98.4



 Last Status:
main.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, 
builder: neo)
WARNING: getfile: daily-19353.cdiff not found on remote server (IP: 
192.121.13.5)
WARNING: getpatch: Can't download daily-19353.cdiff from 
db.local.clamav.net

Trying host db.local.clamav.net (193.1.193.64)...
Downloading daily-19353.cdiff [100%]
daily.cld updated (version: 19353, sigs: 1098868, f-level: 63, 
builder: neo)
bytecode.cvd is up to date (version: 242, sigs: 46, f-level: 63, 
builder: dgoddard)
Database updated (3523139 signatures) from db.local.clamav.net (IP: 
193.1.193.64)

Clamd successfully notified about the update.

 The following ERRORS and/or WARNINGS were detected when
 running the ClamAV update process.  If these ERRORS and/or
 WARNINGS do not show up in the "Last Status" section above,
 then their underlying cause has probably been corrected.

 WARNINGS:
getpatch: Can't download daily-19348.cdiff from 
db.local.clamav.net: 1 Time(s)
getfile: daily-19353.cdiff not found on remote server (IP: 
192.121.13.5): 1 Time(s)
getfile: daily-19348.cdiff not found on remote server (IP: 
192.121.13.5): 1 Time(s)
getpatch: Can't download daily-19353.cdiff from 
db.local.clamav.net: 1 Time(s)




Regards
tommy
--
Med vänlig hälsning
Tommy Berglund
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml