Re: [clamav-users] Is ClamAV available on the hypervisor?

2018-07-04 Thread Remi Bruggeman
Hello 조정환, What type of hypervisor are we talking about? Depending on the hypervisor ClamAV could be installed, but I would certainly not recommend this. It would be better to block remote access to it so no bad actors can get near it. Can you be a bit more specific on question2? You went to ‘s

[clamav-users] Is ClamAV available on the hypervisor?

2018-07-04 Thread 조정환
Hello, I am using ClamAV for my organization, but I am using it only on the VM server.Here is the question. 1. My supervisor asks, "Is ClamAV available on the hypervisor?"I can not answer the question of what other VM servers do when the hypervisor gets infected? 2. I was asked if there is a capabi

Re: [clamav-users] We STILL cannot reliably get virus updates (since new mirrors)

2018-07-04 Thread Joel Esler (jesler)
Okay. Here’s a good conversation. Why? If the tool is provided for updates, and the mirror network is setup to function to that tool Why should the mirrors function for all tools? Or, should the tools have to conform to the mirror network? (I believe this) Sent from my iPhone > On Ju

Re: [clamav-users] We STILL cannot reliably get virus updates (since new mirrors)

2018-07-04 Thread Joel Esler (jesler)
I did block a couple people after I wrote that email. Probably about 10 in all. All the worst offenders. (The person in China attempting to download daily-1.diff every two seconds.) But I did notice some interesting patterns. Like the same host downloading the same definitions over and over

Re: [clamav-users] We STILL cannot reliably get virus updates (since new mirrors)

2018-07-04 Thread Dennis Peterson
It would be a mistake to think everyone is using freshclam to dl signatures. The system needs to accommodate that. dp On 7/4/18 10:08 AM, G.W. Haywood wrote: Hi Joel, FWIW I believe we've had no problems at all with mirrors since March 2018, when I responded to a post on 23rd March by Orion P

Re: [clamav-users] We STILL cannot reliably get virus updates (since new mirrors)

2018-07-04 Thread G.W. Haywood
Hi Joel, FWIW I believe we've had no problems at all with mirrors since March 2018, when I responded to a post on 23rd March by Orion Poplawski, who saw a few timeouts. We also saw a very few timeouts in mid-late March. On Wed, 4 Jul 2018, Joel Esler wrote: ... It's the people that are downlo

Re: [clamav-users] We STILL cannot reliably get virus updates (since new mirrors)

2018-07-04 Thread Dennis Peterson
What do you see if you run freshclam --list-mirrors, and are you running freshclam in daemon mode? The reason I ask is if you deleted mirrors.dat then freshclam should have no knowledge of any previous errors. dp On 7/4/18 1:18 AM, Michael Da Cova wrote: Hi still getting issues, (I have remo

Re: [clamav-users] Freshclam IPv6 error messages on IPv4-only systems

2018-07-04 Thread Paul Kosinski
I always build ClamAV for our systems, and use the "--disable-ipv6" option (among others) when building. Part of the reason I build locally is so that I always have an old version around in case something goes horribly wrong. Also, I can run more realistic tests on the new build before cutting ove

Re: [clamav-users] We STILL cannot reliably get virus updates (since new mirrors)

2018-07-04 Thread Paul Kosinski
Using DNS TXT records is great when they work, but a bandwidth disaster when they don't. I don't think Cloudflare per se is the problem -- I think having different computers serving the DNS vs the big files is the problem. Back in the old days of ClamAV, they probably were the same computers. O

Re: [clamav-users] Freshclam IPv6 error messages on IPv4-only systems

2018-07-04 Thread Tilman Schmidt
Am 04.07.2018 um 15:42 schrieb Walter H.: > On 04.07.2018 15:00, Matt Vander Werf wrote: >> This has been mentioned at various points in several threads over the >> past week or two (sometimes off-hand), but just wanted to somewhat >> consolidate them here and also add my +1 to getting this bug add

Re: [clamav-users] Freshclam IPv6 error messages on IPv4-only systems

2018-07-04 Thread Walter H.
On 04.07.2018 15:00, Matt Vander Werf wrote: This has been mentioned at various points in several threads over the past week or two (sometimes off-hand), but just wanted to somewhat consolidate them here and also add my +1 to getting this bug addressed in ClamAV soon! Per [1]: > This is a ip

[clamav-users] Freshclam IPv6 error messages on IPv4-only systems

2018-07-04 Thread Matt Vander Werf
This has been mentioned at various points in several threads over the past week or two (sometimes off-hand), but just wanted to somewhat consolidate them here and also add my +1 to getting this bug addressed in ClamAV soon! Per [1]: > This is a ipv4 site, and I occasionally get ipv6 error message

Re: [clamav-users] We STILL cannot reliably get virus updates (since new mirrors)

2018-07-04 Thread Al Varnell
As I indicated earlier, any time you see (due to previous errors) it's because mirrors.dat has disabled that IP address. What might be useful are the attempts immediately after you removed mirrors.dat which should indicate the reason for those failures. Is your setup IPv6 compatible? If not, yo

Re: [clamav-users] We STILL cannot reliably get virus updates (since new mirrors)

2018-07-04 Thread Michael Da Cova
Hi still getting issues, (I have removed the mirror file) the setup we have has been in place for years except for minor hiccup, but never this bad main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr) daily.cvd version from DNS: 24721 Retrieving http://database.