Thank you Nikolay,
Do you/anyone know all the required filenames needed for the pull from https://github.com/Cisco-Talos/cvdupdate Can we list them out? There are 4 usually in /var/lib/clamav but not sure these are the same thing used for cvdupdate? Thank you all ScoTT ________________________________ From: clamav-users <clamav-users-boun...@lists.clamav.net> on behalf of David Precious via clamav-users <clamav-users@lists.clamav.net> Sent: Wednesday, July 2, 2025 9:49 AM To: clamav-users@lists.clamav.net Cc: David Precious Subject: EXTERNAL: Re: [clamav-users] EXTERNAL: Re: ** Offline database update. What is the proper approach? It's not something I've tried, but the `DatabaseCustomURL` option in freshclam.conf says it can use `file://` URLs for database files, so it looks like it could be used to point `freshclam` at the location you've copied the files to (from a USB stick you've downloaded them to, for instance). You should be able to download them on a machine with Internet access using https://github.com/Cisco-Talos/cvdupdate or even just freshclam then copy them to a USB stick / burned CD / however else you plan to physically get them to the machine(s) in question. If there are several machines and they have a local network they can talk to each other (but not externally) you might want to put the database updates on one of the machines, and have it serve them up using your preferred webserver, then point the others at that machine using `DatabaseMirror` in `freshclam.conf` - have a read of: https://docs.clamav.net/appendix/CvdPrivateMirror.html#use-freshclam-to-serve-only-whole-database-files-from-a-private-mirror Out of interest - if the machines have no Internet access, how are viruses going to get on them? Are they used to access untrusted physical media (e.g. USB sticks)? On Wed, 2 Jul 2025 12:28:53 +0000 "Hayes, R. Scott via clamav-users" <clamav-users@lists.clamav.net> wrote: > Thank you, > > > That solution may work for a machine that we local access to another > machine on same network. But, We may have isolated machines with > only physical access. What would be the proper steps be in this > scenario? > > > > ScoTT > > > > ________________________________ > From: Nikolay Belaevski <nikolay.belaev...@five9.com> > Sent: Tuesday, July 1, 2025 4:31 PM > To: ClamAV users ML > Cc: Hayes, R. Scott > Subject: EXTERNAL: Re: ** Offline database update. What is the proper > approach? > > > Hi Scott, > > > > Please take a look: > https://docs.clamav.net/appendix/CvdPrivateMirror.html . > > > > From: clamav-users <clamav-users-boun...@lists.clamav.net> on behalf > of Hayes, R. Scott via clamav-users <clamav-users@lists.clamav.net> > Date: Tuesday, July 1, 2025 at 12:18 PM To: > clamav-users@lists.clamav.net <clamav-users@lists.clamav.net> Cc: > Hayes, R. Scott <haye...@zai.com> Subject: [clamav-users] ** Offline > database update. What is the proper approach? > > Hello Experts!! 😃, > > > I'm getting mixed answers from people on the net. I want to know from > the experts which is the proper approach to use for updating a Ubuntu > machine with no internet access. The goal is to automate it as much > as possible. > > > Updating offline system "no access to internet" (Ubuntu): > > > Approach 1: > > 1) Use wget to pull latest files from internet on an outside box. > > * Does wget work anymore (what is the new http url?) > * How many files do I need to get (all 4)? > > 2) Copy files into /var/lib/clamav/ manually on offline box > > 3) run clamav-refresh <-- Does this need internet?? > > > Approach 2: > > 1) Setup a like box with internet access install clamav startup the > clamav-refresh cron. > > 2) After cron runs.. copy all 4 files from /var/lib/clamav to the > offline box /var/lib/clamav > > 3) (do I need to run anything?) > > > Approach 3: > > <is there a better way?> > > > Thanks > > ScoTT > > > ________________________________ > This message is intended only for the use of the intended > recipient(s) If you are not an intended recipient, you are hereby > notified that any use, dissemination, disclosure or copying of this > communication is strictly prohibited. If you have received this > communication in error please destroy all copies of this message and > its attachments and notify the sender immediately. > _______________________________________________ > > Manage your clamav-users mailing list subscription / unsubscribe: > https://lists.clamav.net/mailman/listinfo/clamav-users<https://url.us.m.mimecastprotect.com/s/gK9HCR6kMmCvRmBByiOs8i1-paM?domain=lists.clamav.net> > > > Help us build a comprehensive ClamAV guide: > https://github.com/Cisco-Talos/clamav-documentation<https://url.us.m.mimecastprotect.com/s/cHoDCVOo5qix5w99zsQtxiEcUym?domain=github.com> > > https://docs.clamav.net/#mailing-lists-and-chat<https://url.us.m.mimecastprotect.com/s/sBlcCW6pwrC5P9GGNhpuqioNijV?domain=docs.clamav.net> > > ________________________________ > > CONFIDENTIALITY NOTICE: This e-mail and any files attached may > contain confidential information of Five9 and/or its affiliated > entities. Access by the intended recipient only is authorized. Any > liability arising from any party acting, or refraining from acting, > on any information contained in this e-mail is hereby excluded. If > you are not the intended recipient, please notify the sender > immediately, destroy the original transmission and its attachments > and do not disclose the contents to any other person, use it for any > purpose, or store or copy the information in any medium. Copyright in > this e-mail and any attachments belongs to Five9 and/or its > affiliated entities. ________________________________ This message is > intended only for the use of the intended recipient(s) If you are not > an intended recipient, you are hereby notified that any use, > dissemination, disclosure or copying of this communication is > strictly prohibited. If you have received this communication in error > please destroy all copies of this message and its attachments and > notify the sender immediately. > _______________________________________________ > > Manage your clamav-users mailing list subscription / unsubscribe: > https://lists.clamav.net/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/Cisco-Talos/clamav-documentation > > https://docs.clamav.net/#mailing-lists-and-chat _______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat ________________________________ This message is intended only for the use of the intended recipient(s) If you are not an intended recipient, you are hereby notified that any use, dissemination, disclosure or copying of this communication is strictly prohibited. If you have received this communication in error please destroy all copies of this message and its attachments and notify the sender immediately. _______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat
