On Oct 5, 2021, at 4:41 AM, Adam Baliko via clamav-users <clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>> wrote:
I have a private VLAN here, but my public IP is granted by my ISP. I'm assuming this is a dynamic IP but I have no idea how often that changes (maybe I should start noting the IPs which are banned, if they are different). And there is only one machine making Clamav updates within my VLAN, so if there are multiple downloads from the same IP, then the only explanation I can think of is on the ISP level (I get a public IP which was banned previously). BTW, my public IP is 84.189.37.183. I can't seem to be able to check the versions of Clamav. I have a QNAP NAS, and as I understand Clamav is somehow baked into the firmware. I am currently on the latest Firmware release if that is of any help. Interestingly, today I wanted to try the manual update again to see what IP is displayed there (should be the same, but who knows), and instead of the usual Error 1015 successfully downloaded the daily.cvd file. So currently my virus definitions are up to date, but I have worries about getting my IP blocked again in the future. 1015 means you are not using Freshclam or cvdupdate to download definitions. -- Joel Esler Strategy, Cisco Talos Intelligence Group
_______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
