date:20180907

Re: [clamav-users] updates

2018-09-07 Thread Paul Kosinski

Here is our recent CVD delay report showing how long the actual
daily.cvd (and sometimes bytcode.cvd) file(s) lag behind the DNS TXT
record.

We are located near Boston, and the data comes via Comcast cable, but
our DNS queries use our old, slow static-IP DSL. I keep it this way
because there were stories about some major ISPs munging DSL replies
(like replacing NXDOMAIN with an IP addresse of a Web site belonging to
the ISP). Our DSL, on the other hand, doesn't ever do this, and even
passes port 25, so we can send mail directly (rather than relaying
through a possibly snoopy ISP.)

  2018-08-18 05:03:02  No delay
  2018-08-18 13:18:02  00:15:01 delay
  2018-08-18 21:33:02  00:15:01 delay
  2018-08-19 05:03:01  No delay
  2018-08-19 14:03:01  00:44:59 delay
  2018-08-19 21:18:02  00:15:00 delay
  2018-08-20 05:33:02  00:30:01 delay
  2018-08-20 13:33:02  00:30:00 delay
  2018-08-20 21:03:02  No delay
  2018-08-21 05:18:01  No delay
  2018-08-21 13:03:01  No delay
  2018-08-22 18:18:02  00:15:00 delay
  2018-08-23 02:33:01  00:29:59 delay
  2018-08-23 09:48:02  00:45:00 delay
  2018-08-23 17:03:02  No delay
  2018-08-24 02:18:02  01:15:00 delay
  2018-08-24 09:33:02  00:30:00 delay
  2018-08-24 18:48:02  00:30:01 delay
  2018-08-25 01:18:02  No delay
  2018-08-25 09:18:02  00:15:00 delay
  2018-08-25 17:33:02  00:30:00 delay
  2018-08-26 02:33:01  01:29:59 delay
  2018-08-26 09:48:02  00:45:01 delay
  2018-08-26 18:03:02  01:00:00 delay
  2018-08-27 01:03:01  No delay
  2018-08-27 09:18:02  00:15:00 delay
  2018-08-27 17:33:01  00:29:59 delay
  2018-08-28 01:48:02  00:45:00 delay
  2018-08-28 09:18:02  No delay
  2018-08-28 17:33:01  No delay
  2018-08-29 01:18:01  00:14:59 delay
  2018-08-29 09:33:02  00:30:01 delay
  2018-08-29 17:48:01  00:45:00 delay
  2018-08-30 01:03:01  No delay
  2018-08-30 09:18:02  00:15:00 delay
  2018-08-30 17:18:01  00:14:59 delay
  2018-08-31 01:18:01  00:14:59 delay
  2018-08-31 09:48:02  00:45:01 delay
  2018-08-31 22:18:01  00:45:00 delay
  2018-09-01 05:18:01  00:14:59 delay
  2018-09-01 13:33:02  00:30:00 delay
  2018-09-01 21:48:01  00:44:59 delay
  2018-09-02 07:03:02  01:00:00 delay
  2018-09-02 13:48:01  00:44:59 delay
  2018-09-02 21:03:01  No delay
  2018-09-03 05:03:02  No delay
  2018-09-03 13:03:02  No delay
  2018-09-03 21:03:01  No delay
  2018-09-04 05:03:01  No delay
  2018-09-04 13:03:02  No delay
  2018-09-04 21:03:01  No delay
  2018-09-05 05:03:02  No delay
  2018-09-05 14:18:01  01:14:59 delay
  2018-09-05 21:18:02  00:15:00 delay
  2018-09-06 05:18:02  00:15:00 delay
  2018-09-06 13:33:02  00:30:01 delay
  2018-09-06 21:03:03  No delay
  2018-09-07 05:18:02  00:15:00 delay

--

On Fri, 7 Sep 2018 15:32:51 +
"Micah Snyder (micasnyd)"  wrote:

> Hi Michael,
> 
> Can you tell me what geographic region/country you're coming from?
> We've seen reports of this from a number of users though I've never
> personally observed this.  I am starting to wonder if the issue is
> only occurring in certain region(s).
> 
> Regardless, I am going to try to mitigate the error in the upcoming
> 0.100.2 patch release and 0.101 feature release.
> 
> -Micah
> 
> Micah Snyder
> ClamAV Development
> Talos
> Cisco Systems, Inc.
> 
> 
> On Sep 7, 2018, at 5:11 AM, Michael Da Cova
> mailto:mdac...@netpilot.com>> wrote:
> 
> Hi
> 
> I still get "WARNING: Mirror 104.16.187.138 is not synchronized"
> often on freshclam updates
> 
> Trying to download http://database.clamav.net/daily.cvd (IP:
> 104.16.187.138) Downloading daily.cvd [100%]
> WARNING: Mirror 104.16.187.138 is not synchronized
> 
> Trying to download http://database.clamav.net/daily.cvd (IP:
> 104.16.185.138) Downloading daily.cvd [100%]
> WARNING: Mirror 104.16.185.138 is not synchronized.
> 
> Trying to download http://database.clamav.net/daily.cvd (IP:
> 104.16.186.138) Downloading daily.cvd [100%]
> WARNING: Mirror 104.16.186.138 is not synchronized.
> 
> Querying daily.0.79.0.0.6810BA8A.ping.clamav.net
> Giving up on database.clamav.net...
> 
> I have been deleting the mirror.dat file which seems to help for a
> while
> 
> --
> Michael Da Cova

> 
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Syncing only CustomDatabaseURLs with freshclam

2018-09-07 Thread Noel Jones

On 9/7/2018 9:42 AM, Sven Bartscher wrote:
> Greetings,
> 
> I'm running ClamAV with an additional third party virus database. That
> database is kept up to date by specifying the files shipped by it as
> DatabaseCustomURL entries in freshclam.conf like this:
> 
...
> 
> Is there some way to get freshclam to do what I want here or maybe some
> other way (without freshclam) to update only the third-party database?
> 


Perhaps the freshclam option "--update-db=DBNAME" is what you're
looking for.  See "man freshclam" for details.



  -- Noel Jones
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] updates

2018-09-07 Thread Micah Snyder (micasnyd)

Hi Michael,

Can you tell me what geographic region/country you're coming from?  We've seen 
reports of this from a number of users though I've never personally observed 
this.  I am starting to wonder if the issue is only occurring in certain 
region(s).

Regardless, I am going to try to mitigate the error in the upcoming 0.100.2 
patch release and 0.101 feature release.

-Micah

Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.


On Sep 7, 2018, at 5:11 AM, Michael Da Cova 
mailto:mdac...@netpilot.com>> wrote:

Hi

I still get "WARNING: Mirror 104.16.187.138 is not synchronized" often on 
freshclam updates

Trying to download http://database.clamav.net/daily.cvd (IP: 104.16.187.138)
Downloading daily.cvd [100%]
WARNING: Mirror 104.16.187.138 is not synchronized

Trying to download http://database.clamav.net/daily.cvd (IP: 104.16.185.138)
Downloading daily.cvd [100%]
WARNING: Mirror 104.16.185.138 is not synchronized.

Trying to download http://database.clamav.net/daily.cvd (IP: 104.16.186.138)
Downloading daily.cvd [100%]
WARNING: Mirror 104.16.186.138 is not synchronized.

Querying daily.0.79.0.0.6810BA8A.ping.clamav.net
Giving up on database.clamav.net...

I have been deleting the mirror.dat file which seems to help for a while

--
Michael Da Cova

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam vs sudo freshclam

2018-09-07 Thread Micah Snyder (micasnyd)

Nevermind my previous question. I see that you identified that the issue was a 
result of Little Snitch settings.


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.


On Sep 7, 2018, at 11:26 AM, Micah Snyder (micasnyd) 
mailto:micas...@cisco.com>> wrote:

At present, long-term ignore time is 72 hours and the short-term ignore time is 
6 hours.  The logic in freshclam to determine if it should ignore for the 
long-term or short-term length depends on what kind of error occurs and how 
many errors occur.

I am looking into reducing the timeout length, and simplifying some of the 
logic.

What version of macOS are you using?  10.10 reportedly had some issues with DNS 
lookups, though I don't know the specifics.


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.


On Sep 5, 2018, at 5:03 AM, Al Varnell 
mailto:alvarn...@mac.com>> wrote:

As previously observed, depending on installation permissions, some of us need 
sudo and others do not.

Anytime you see "Ignoring mirror xxx.xxx.xxx.xxx (due to previous errors)" for 
all available mirrors, you must trash mirrors.dat or wait for some amount of 
time (unknown to me) in order to recover.

-Al-

On Wed, Sep 05, 2018 at 01:33 AM, Michael Newman wrote:
This is on a Mac with a MacPorts ClamAV installation.

I previously reported that if I ran freshclam as root it failed, but worked if 
I ran it as me.

Now I have the exact opposite situation. It fails if I run it as me, but works 
if I run as root.

If I don’t use sudo, the first error I get is this:

Querying current.cvd.clamav.net
WARNING: Can't query current.cvd.clamav.net
WARNING: Invalid DNS reply. Falling back to HTTP mode.

(Followed by many, many more. See below.)

If I use sudo, that error never appears.

I think this must be some sort of DNS error, but I have no idea what it might 
be or how to fix it.

The following works fine:

MrMuscle:clamav mnewman$ host -t txt 
current.cvd.clamav.net
current.cvd.clamav.net descriptive text 
"0.100.1:58:24903:1536132540:1:63:47832:327"

This started failing while I was away on vacation. Nothing was changed on the 
machine while I was away.

FWIW, I’m using Google’s DNS servers. I live in Thailand and they seem to be 
the fastest.

I changed permissions on the database files as follows:

MrMuscle:clamav mnewman$ pwd
/opt/local/share/clamav
MrMuscle:clamav mnewman$ ls -lea
total 329448
drwxrwxrwx7 _clamav  _clamav224 Sep  5 15:19 .
drwxrwxr-x  115 root wheel 3680 Aug 19 10:14 ..
-rw-rw-rw-1 _clamav  _clamav 187426 Aug 19 11:08 bytecode.cvd
-rw-rw-rw-1 _clamav  _clamav   50109025 Sep  5 14:50 daily.cvd
-rw-rw-rw-@   1 _clamav  _clamav 52 Aug 22 05:48 local.ign2
-rw-rw-rw-1 _clamav  _clamav  117892267 Aug 19 11:08 main.cvd
-rw-rw-rw-1 _clamav  _clamav260 Sep  5 15:19 mirrors.dat

I’m appending the verbose output of freshclam when run without and with sudo:

MrMuscle:bin mnewman$ /opt/local/bin/freshclam -v
Current working dir is /opt/local/share/clamav
Max retries == 3
ClamAV update process started at Wed Sep  5 14:49:53 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
WARNING: Can't query current.cvd.clamav.net
WARNING: Invalid DNS reply. Falling back to HTTP mode.
If-Modified-Since: Wed, 07 Jun 2017 21:38:10 GMT
Reading CVD header (main.cvd): nonblock_connect: connect(): fd=7 errno=64: Host 
is down
Can't connect to port 80 of host db.US.clamav.net 
(IP: 104.16.188.138)
nonblock_connect: connect(): fd=7 errno=64: Host is down
Can't connect to port 80 of host db.US.clamav.net 
(IP: 104.16.186.138)
Ignoring mirror 104.16.188.138 (due to previous errors)
Trying host db.US.clamav.net (104.16.187.138)...
nonblock_connect: connect(): fd=7 errno=64: Host is down
Can't connect to port 80 of host db.US.clamav.net 
(IP: 104.16.187.138)
Trying host db.US.clamav.net (104.16.185.138)...
nonblock_connect: connect(): fd=7 errno=64: Host is down
Can't connect to port 80 of host db.US.clamav.net 
(IP: 104.16.185.138)
Trying host db.US.clamav.net (104.16.189.138)...
nonblock_connect: connect(): fd=7 errno=64: Host is down
Can't connect to port 80 of host db.US.clamav.net 
(IP: 104.16.189.138)
WARNING: Can't read main.cvd header from 
db.US.clamav.net (IP: )
Trying again in 5 secs...
ClamAV update process started at Wed Sep  5 14:49:58 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
WARNING: Can't query current.cvd.clamav.net
WARNING: Invalid DNS reply. Falling back to HTTP mode.
If-Modified-Since: Wed, 07

Re: [clamav-users] freshclam vs sudo freshclam

2018-09-07 Thread Micah Snyder (micasnyd)

At present, long-term ignore time is 72 hours and the short-term ignore time is 
6 hours.  The logic in freshclam to determine if it should ignore for the 
long-term or short-term length depends on what kind of error occurs and how 
many errors occur.

I am looking into reducing the timeout length, and simplifying some of the 
logic.

What version of macOS are you using?  10.10 reportedly had some issues with DNS 
lookups, though I don't know the specifics.


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.


On Sep 5, 2018, at 5:03 AM, Al Varnell 
mailto:alvarn...@mac.com>> wrote:

As previously observed, depending on installation permissions, some of us need 
sudo and others do not.

Anytime you see "Ignoring mirror xxx.xxx.xxx.xxx (due to previous errors)" for 
all available mirrors, you must trash mirrors.dat or wait for some amount of 
time (unknown to me) in order to recover.

-Al-

On Wed, Sep 05, 2018 at 01:33 AM, Michael Newman wrote:
This is on a Mac with a MacPorts ClamAV installation.

I previously reported that if I ran freshclam as root it failed, but worked if 
I ran it as me.

Now I have the exact opposite situation. It fails if I run it as me, but works 
if I run as root.

If I don’t use sudo, the first error I get is this:

Querying current.cvd.clamav.net
WARNING: Can't query current.cvd.clamav.net
WARNING: Invalid DNS reply. Falling back to HTTP mode.

(Followed by many, many more. See below.)

If I use sudo, that error never appears.

I think this must be some sort of DNS error, but I have no idea what it might 
be or how to fix it.

The following works fine:

MrMuscle:clamav mnewman$ host -t txt 
current.cvd.clamav.net
current.cvd.clamav.net descriptive text 
"0.100.1:58:24903:1536132540:1:63:47832:327"

This started failing while I was away on vacation. Nothing was changed on the 
machine while I was away.

FWIW, I’m using Google’s DNS servers. I live in Thailand and they seem to be 
the fastest.

I changed permissions on the database files as follows:

MrMuscle:clamav mnewman$ pwd
/opt/local/share/clamav
MrMuscle:clamav mnewman$ ls -lea
total 329448
drwxrwxrwx7 _clamav  _clamav224 Sep  5 15:19 .
drwxrwxr-x  115 root wheel 3680 Aug 19 10:14 ..
-rw-rw-rw-1 _clamav  _clamav 187426 Aug 19 11:08 bytecode.cvd
-rw-rw-rw-1 _clamav  _clamav   50109025 Sep  5 14:50 daily.cvd
-rw-rw-rw-@   1 _clamav  _clamav 52 Aug 22 05:48 local.ign2
-rw-rw-rw-1 _clamav  _clamav  117892267 Aug 19 11:08 main.cvd
-rw-rw-rw-1 _clamav  _clamav260 Sep  5 15:19 mirrors.dat

I’m appending the verbose output of freshclam when run without and with sudo:

MrMuscle:bin mnewman$ /opt/local/bin/freshclam -v
Current working dir is /opt/local/share/clamav
Max retries == 3
ClamAV update process started at Wed Sep  5 14:49:53 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
WARNING: Can't query current.cvd.clamav.net
WARNING: Invalid DNS reply. Falling back to HTTP mode.
If-Modified-Since: Wed, 07 Jun 2017 21:38:10 GMT
Reading CVD header (main.cvd): nonblock_connect: connect(): fd=7 errno=64: Host 
is down
Can't connect to port 80 of host db.US.clamav.net 
(IP: 104.16.188.138)
nonblock_connect: connect(): fd=7 errno=64: Host is down
Can't connect to port 80 of host db.US.clamav.net 
(IP: 104.16.186.138)
Ignoring mirror 104.16.188.138 (due to previous errors)
Trying host db.US.clamav.net (104.16.187.138)...
nonblock_connect: connect(): fd=7 errno=64: Host is down
Can't connect to port 80 of host db.US.clamav.net 
(IP: 104.16.187.138)
Trying host db.US.clamav.net (104.16.185.138)...
nonblock_connect: connect(): fd=7 errno=64: Host is down
Can't connect to port 80 of host db.US.clamav.net 
(IP: 104.16.185.138)
Trying host db.US.clamav.net (104.16.189.138)...
nonblock_connect: connect(): fd=7 errno=64: Host is down
Can't connect to port 80 of host db.US.clamav.net 
(IP: 104.16.189.138)
WARNING: Can't read main.cvd header from 
db.US.clamav.net (IP: )
Trying again in 5 secs...
ClamAV update process started at Wed Sep  5 14:49:58 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
WARNING: Can't query current.cvd.clamav.net
WARNING: Invalid DNS reply. Falling back to HTTP mode.
If-Modified-Since: Wed, 07 Jun 2017 21:38:10 GMT
Reading CVD header (main.cvd): Ignoring mirror 104.16.189.138 (due to previous 
errors)
Ignoring mirror 104.16.188.138 (due to previous errors)
Ignoring mirror 104.16.186.138 (due to previous errors)
Ignoring mirror 104.16.185.138 (due to

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-09-07 Thread Micah Snyder (micasnyd)

Hi Jens,

Sorry I have not yet found time to investigate the source of the "(null) FOUND" 
issue.  Thank-you for the reminder.

It would be helpful if you submitted a bug report to track the issue.


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.


On Sep 5, 2018, at 10:44 AM, Kretschmer, Jens 
mailto:kretschmer.j...@siemens.com>> wrote:

Hi Micah,

did you have time to investigate those issues?

Should I create bug reports for them or are those issues being tracked already? 
Do you need any more information from my side?

Kr,
Jens

From: Micah Snyder (micasnyd) mailto:micas...@cisco.com>>
Sent: Thursday, August 9, 2018 2:39 PM
To: ClamAV users ML 
mailto:clamav-users@lists.clamav.net>>
Subject: Re: [clamav-users] ScanOnAccess: ... (null) FOUND

I've been running clamd with OnAccess on a box using Firefox and just yesterday 
saw the (null) FOUND as well.  I haven't had a chance to take the file in 
question and debug with clamscan to reproduce it and figure out what's causing 
it but I will do so soon.

Regarding your second issue, I believe there is a memory leak with the 
OnAccessExtraScanning feature because the threads that process the extra 
scanning work aren't being join()'d.
I have a feeling that may be why you're seeing "Unable to kick off extra 
scanning".  We're getting near the end of our development cycle for 0.101 and 
still have some tough work left, but we'll try to find a solution to the 
OnAccessExtraScanning thread joining issue if time permits.

Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.


On Aug 9, 2018, at 4:03 AM, Kretschmer, Jens 
mailto:kretschmer.j...@siemens.com>> wrote:

Do you have the OnAccessExtraScanning option on by chance?

Yes, OnAccessExtraScanning is turned on.

I was able to reproduce this behavior on a different machine. It uses the same 
configuration as the first machine (the clamconf output can be found in my 
previous E-Mail).
I rebooted the machine yesterday at 13:45 and left it untouched. I did not even 
log in. Today I logged in via ssh and the first ScanOnAccess message since the 
reboot in the journal was:

Aug 09 09:36:47 hostname2 clamd[]: SelfCheck: Database status OK.
Aug 09 09:37:24 hostname2 clamd[]: ScanOnAccess: Performing additional 
scanning on file '/home/user1/.sh_histdir/hostname2.0'
Aug 09 09:37:24 hostname2 clamd[]: ScanOnAccess: 
/home/user1/.sh_histdir/hostname2.0: (null) FOUND
Aug 09 09:39:34 hostname2 clamd[]: ScanOnAccess: Performing additional 
scanning on file '/home/user1/test2'
Aug 09 09:39:34 hostname2 clamd[]: ScanOnAccess: /home/user1/test2: (null) 
FOUND

On the first machine I restarted clamd@scan yesterday 13:32:05 and ran the 
following script

#!/bin/ksh
file="testfile.txt"
while true; do
 echo "test123" > $file
 sync
 rm $file
done

after about 13 hours clamd starts to show only the messages: "ScanOnAccess: 
Unable to kick off extra scanning."

Aug 09 02:40:37 hostname1 clamd[15866]: ScanOnAccess: Performing additional 
scanning on file '/home/user1/test/testfile.txt'
Aug 09 02:40:38 hostname1 clamd[15866]: ScanOnAccess: Performing additional 
scanning on file '/home/user1/test/testfile.txt'
Aug 09 02:40:39 hostname1 clamd[15866]: ScanOnAccess: Unable to kick off extra 
scanning.
Aug 09 02:40:39 hostname1 clamd[15866]: ScanOnAccess: Unable to kick off extra 
scanning.

Best regards,
Jens
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] Syncing only CustomDatabaseURLs with freshclam

2018-09-07 Thread Sven Bartscher

Greetings,

I'm running ClamAV with an additional third party virus database. That
database is kept up to date by specifying the files shipped by it as
DatabaseCustomURL entries in freshclam.conf like this:

DatabaseCustomURL http://database-provider.example/third-party-db.cdb
[More entries like the one above omitted here...]

That way freshclam updates both the original ClamAV database and the
third party files we specified.

I would like to change this setup, so it only uses the third-party
database and not the original ClamAV database, but I see no way to tell
freshclam not to download the standard main.cvd and friends.

I don't think I can specify the third-party mirror as a PrivateMirror,
because it doesn't contain the files freshclam usually expects on a
ClamAV mirror (main.cvd, daily.cvd, ...). It also doesn't seem to be
possible to instruct freshclam to use no DatabaseMirror, because if I
don't specify one, freshclam will just use database.clamav.net as a default.

Is there some way to get freshclam to do what I want here or maybe some
other way (without freshclam) to update only the third-party database?

Regards
Sven



signature.asc
Description: OpenPGP digital signature
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] updates

2018-09-07 Thread Michael Da Cova


Hi

I still get "WARNING: Mirror 104.16.187.138 is not synchronized" often 
on freshclam updates


Trying to download http://database.clamav.net/daily.cvd (IP: 104.16.187.138)
Downloading daily.cvd [100%]
WARNING: Mirror 104.16.187.138 is not synchronized

Trying to download http://database.clamav.net/daily.cvd (IP: 104.16.185.138)
Downloading daily.cvd [100%]
WARNING: Mirror 104.16.185.138 is not synchronized.

Trying to download http://database.clamav.net/daily.cvd (IP: 104.16.186.138)
Downloading daily.cvd [100%]
WARNING: Mirror 104.16.186.138 is not synchronized.

Querying daily.0.79.0.0.6810BA8A.ping.clamav.net
Giving up on database.clamav.net...

I have been deleting the mirror.dat file which seems to help for a while

--
Michael Da Cova

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] updates

Re: [clamav-users] Syncing only CustomDatabaseURLs with freshclam

Re: [clamav-users] updates

Re: [clamav-users] freshclam vs sudo freshclam

Re: [clamav-users] freshclam vs sudo freshclam

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

[clamav-users] Syncing only CustomDatabaseURLs with freshclam

[clamav-users] updates

8 matches

Site Navigation

Mail list logo

Footer information