I'll contact Synology support team. 

Regards 
Rémy 




"Ce message et toutes ses pièces jointes sont établis à l'intention exclusive 
de son/ses destinataire(s) et sont confidentiels. Si vous recevez ce message 
par erreur, merci de le détruire et d'en avertir immédiatement l'expéditeur. 
Toute utilisation de ce message et/ou de son contenu par une personne autre 
qu'un destinataire, et toute diffusion ou publication ultérieure du contenu de 
ce message, en totalité ou en partie, est interdite sauf autorisation préalable 
et écrite de l'émetteur" 
----- Mail original -----

De: "Eero Volotinen" <eero.voloti...@iki.fi> 
À: "ClamAV users ML" <clamav-users@lists.clamav.net> 
Envoyé: Samedi 13 Mars 2021 14:19:22 
Objet: Re: [clamav-users] Restriction of downloads 


Synology. 


Eero 


On Sat, Mar 13, 2021 at 3:09 PM Rémy DODIN via clamav-users < 
clamav-users@lists.clamav.net > wrote: 





My synology Clamav is at "Upgraded ClamAV engine to 0.102.3" 
As it is written here and my packets are at latest update level. 

https://www.synology.com/fr-fr/releaseNote/AntiVirus?model=DS713%2B 



But virus signature is unabled to be refreshed as I wrote it ! 
It worked until last refresh from 03/06/21 and then, high CPU and storage 
utilisation and no refresh. 
It looks like it is going into a loop trying to get virus database updates.... 
(If it goes into a loop, then the refresh tool may have issue ! and may be you 
expected abuse due to high freshclam or virus database update is into a loop 
due incorrect process ? 


If a loop exist, who's the culprit ? (I'm not a developper and just end user 
with no skills) 
synology ? or Clamav ? 

I just run again database update option and after more than 4 minutes, it was 
always runing and I have to force a stop to not have it running 24/24h. 
Consuming a lot of CPU, energy (not eco friendly) - It is acting like a virus 
trying to kill a system, strange ! 



Very strange 



Regards 
Rémy 




"Ce message et toutes ses pièces jointes sont établis à l'intention exclusive 
de son/ses destinataire(s) et sont confidentiels. Si vous recevez ce message 
par erreur, merci de le détruire et d'en avertir immédiatement l'expéditeur. 
Toute utilisation de ce message et/ou de son contenu par une personne autre 
qu'un destinataire, et toute diffusion ou publication ultérieure du contenu de 
ce message, en totalité ou en partie, est interdite sauf autorisation préalable 
et écrite de l'émetteur" 


De: "Joel Esler (jesler) via clamav-users" < clamav-users@lists.clamav.net > 
À: "ClamAV users ML" < clamav-users@lists.clamav.net > 
Cc: "Joel Esler (jesler)" < jes...@cisco.com > 
Envoyé: Samedi 13 Mars 2021 13:47:08 
Objet: Re: [clamav-users] Restriction of downloads 

Team— 


The qnap and synology issues are a result of the EOL of <0.100. Not as a result 
of the abusive downloaders. Two separate issues. 


Our EOL policy that has been in place is “current version with all minor 
patches and one back with all minor patches”. This has been our policy for 
about 8–10 years. Our current version is 0.103.1, which means according to our 
EOL policy, we should allow .103, and .102. Everything below that we should 
block. 


It is becoming more and more necessary to enforce these cut off points because 
of many reasons. Load to the mirror network being one. So, .100, and .101 will 
continue to be supported for a bit, but soon, we’re going to have to cut those 
off too. 


The vast majority of ClamAV users are on 0.102.4. The outliners are people that 
haven’t upgraded to a latest version should start upgrading to get ahead of the 
curve. 




Sent from my  iPhone 


<blockquote>
On Mar 13, 2021, at 05:52, Matus UHLAR - fantomas < uh...@fantomas.sk > wrote: 




<blockquote>



<blockquote>

<blockquote>

<blockquote>
I just found that my "antivirus essentiel" installed package 

</blockquote>

</blockquote>

</blockquote>

<blockquote>

<blockquote>

<blockquote>
provided by Synology is unable to update virus definition file since 

</blockquote>

</blockquote>

</blockquote>

<blockquote>

<blockquote>

<blockquote>
03/06/2021 ! 

</blockquote>

</blockquote>

</blockquote>


<blockquote>
On 13/03/2021 00:47, G.W. Haywood via clamav-users wrote: 

</blockquote>

<blockquote>

<blockquote>
Then should you not be talking to Synology? 

</blockquote>

</blockquote>

On 13.03.21 11:16, Paul Smith via clamav-users wrote: 

<blockquote>
Maybe Synology and QNAP, etc could run private mirrors for their devices which 
they don't provide up-to-date Freshclam for... 

</blockquote>

QNAP runs freshclam. checked now with my 419P+: 

ClamAV update process started at Sat Mar 13 12:47:36 2021 
WARNING: getpatch: Can't download main-55.cdiff from database.clamav.net 
ERROR: getpatch: Can't download main-55.cdiff from database.clamav.net 
WARNING: Incremental update failed, trying to download main.cvd 
ERROR: Can't download main.cvd from database.clamav.net 
Giving up on database.clamav.net... 
Update failed. Your network may be down or none of the mirrors listed in 
/etc/config/freshclam.conf is working. Check 
http://www.clamav.net/doc/mirrors-faq.html for possible reasons. 


However, many of QNAP devices have obsolete clamav version: 

[~] # freshclam -V 
ClamAV 0.99.3/17260/Wed May 22 12:40:22 2013 


-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ 
Warning: I wish NOT to receive e-mail advertising to this address. 
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 
Microsoft dick is soft to do no harm 

_______________________________________________ 

clamav-users mailing list 
clamav-users@lists.clamav.net 
https://lists.clamav.net/mailman/listinfo/clamav-users 


Help us build a comprehensive ClamAV guide: 
https://github.com/vrtadmin/clamav-faq 

http://www.clamav.net/contact.html#ml 

</blockquote>


_______________________________________________ 

clamav-users mailing list 
clamav-users@lists.clamav.net 
https://lists.clamav.net/mailman/listinfo/clamav-users 


Help us build a comprehensive ClamAV guide: 
https://github.com/vrtadmin/clamav-faq 

http://www.clamav.net/contact.html#ml 


_______________________________________________ 

clamav-users mailing list 
clamav-users@lists.clamav.net 
https://lists.clamav.net/mailman/listinfo/clamav-users 


Help us build a comprehensive ClamAV guide: 
https://github.com/vrtadmin/clamav-faq 

http://www.clamav.net/contact.html#ml 

</blockquote>


_______________________________________________ 

clamav-users mailing list 
clamav-users@lists.clamav.net 
https://lists.clamav.net/mailman/listinfo/clamav-users 


Help us build a comprehensive ClamAV guide: 
https://github.com/vrtadmin/clamav-faq 

http://www.clamav.net/contact.html#ml 

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to