On 2008-11-27 06:38, tung dang wrote:
> Hi Torok Edwin and friends,
> Thank you for your reply, it's very useful. I would like to confirm some
> small concerned things
>
> Wrong, ClamAV doesn't use rsync at all!
>   
>> ClamAV downloads the database via HTTP (optionally through a proxy).
>>
>>
>>     
> ClamAV does not use rsync for updating database between client and mirror, 
> *but
> it uses rsync for synchronizing database between mirrors, is it right?*
>   

Yes, however if you only want to distribute updates on your local
network you don't need to become a mirror.

>   
>>     
>>> *2. *Because of using rsync for synchonizing database, does clamav
>>>       
>> support
>>     
>>> windows-mirror?* (Because i found some software can run ssh and rsync on
>>> Windows, i wonder whether clamav-team support windows-mirror or not)
>>>
>>>       
>> Again, not rsync.
>>     
>
>
> In this question, i would like to ask whether i can use windows-server
> for *building
> public-windows-mirror or not, is it possible* ? If one windows-server is
> setup to provide full functionalities(rsync, sshd) as in
> clamav-mirror-howto.pdf, *does clamav-team support windows-mirror?* I don't
> want to use windows, but it is requirement from my boss.
>
>   

You say below that it is a private mirror,  and you say here that it is
a public mirror.
Which one is it?

If you want to become a *public* mirror, do you have the necesary
bandwidth? (10 Mbit/s, unlimited traffic)

>   
>>> 4. As i have read, clamav-team does not support private mirror. But i
>>>       
>> want
>>     
>>> to have 1 mirror for my local network.* I wonder how can I create my own
>>> mirror with different way? Does anybody have any suggestions ?*
>>>
>>>       
>> Sure you can, just set freshclam to download to your webserver's
>> DocumentRoot,
>> and set DatabaseMirror of the other freshclams to your server.
>> Also turn ScriptedUpdates Off
>>
>> This is all explained in the FAQ: http://clamav.net/support/faq
>>
>>     
>
> But because of it is private mirror, so i need to download whole file

Yes, but only daily.cvd.

>  from
> public server each time i update virus database on my private mirror. It is
> not good if the network is unstable. Of course, in my local network is no
> problem. *Does it have any solution for only download diff file and patch it
> to old file? *
>   

No, you can't rebuild a .cvd.

I think you can write some script to fetch the .cdiff file from the
public mirror, launched from freshclam's --on-update-execute.
You then put these files on your local webserver, and set your other
freshclams to use your webserver as a mirror.
Then those freshclams should be able to use .cdiff files also.
The problem is that if incremental update fails [*], they will look for
a .cvd file, so you would need the master freshclam to download a .cvd
anyway.

I think it is much simpler, if you just set up all freshclams to use a
caching proxy, that way:
- you don't waste public mirrors bandwidth, since each DB update is
downloaded only once for the entire network
- you don't waste public mirror bandwidth by downloading a .cvd file
each time
- it will work even if a .cdiff fails to be applied [*]

[*]: incremental update can fail if your DB is too old, and not all
.cdiffs are available anymore from the mirrors, or due to a corrupted
download

Best regards,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to