Re: [clamav-users] Mirror issues and what we are doing to fix it

2017-08-30 Thread Dennis Peterson
Awesome, Joel. Everything is greatly appreciated. dp On 8/30/17 3:28 PM, Joel Esler (jesler) wrote: Dennis, The team has been cleaning this up almost all day. Expect the work to continue for awhile. -- Joel Esler | Talos: Manager | jes...@cisco.com On Aug 30,

Re: [clamav-users] Mirror issues and what we are doing to fix it

2017-08-30 Thread Joel Esler (jesler)
Dennis, The team has been cleaning this up almost all day. Expect the work to continue for awhile. -- Joel Esler | Talos: Manager | jes...@cisco.com On Aug 30, 2017, at 1:11 PM, Dennis Peterson > wrote: I had the

Re: [clamav-users] ClamAV not picking up Eicar file...

2017-08-30 Thread Steven Morgan
Colin, Is it possible that icap has changed the file in some way? Is it possible to set up a test to verify what is sent to ClamAV? You could also try using the clamd.conf parameters LeaveTemporaryFiles and TemporaryDirectory. Then run your file through your squidclamav configuration and inspect

Re: [clamav-users] ClamAV not picking up Eicar file...

2017-08-30 Thread Ralph Seichter
On 30.08.17 19:01, Colin Rogers wrote: > Please let me know what I can provide to get to the bottom of this. Three messages of yours have been weeded out here. Please don't send virus samples to public mailing lists. -Ralph ___ clamav-users mailing

Re: [clamav-users] ClamAV not picking up Eicar file...

2017-08-30 Thread Colin Rogers
I also get signature found when I run clamscan against the file but not when going through icap. I can see in my c-icap/access.log file that clam considers the file good to go: ubuntu-icap:~$ clamscan eicar.com.txt eicar.com.txt: Eicar-Test-Signature FOUND --- SCAN SUMMARY ---

Re: [clamav-users] ClamAV not picking up Eicar file...

2017-08-30 Thread Alain Zidouemba
$ wget http://www.eicar.org/download/eicar.com.txt --2017-08-30 14:35:48-- http://www.eicar.org/download/eicar.com.txt Resolving www.eicar.org (www.eicar.org)... 213.211.198.62 Connecting to www.eicar.org (www.eicar.org)|213.211.198.62|:80... connected. HTTP request sent, awaiting response... 200

Re: [clamav-users] ClamAV not picking up Eicar file...

2017-08-30 Thread Colin Rogers
Hello Steve, Thank you for getting back to me about this. I can definitely open a bug for this but I would like to make sure it is an actual bug and not a misconfiguration on my part somehow. This was working before so I dont understand why it isnt working any longer. Is there anything I can

Re: [clamav-users] ClamAV not picking up Eicar file...

2017-08-30 Thread Steven Morgan
Colin, Please open a bug report @ bugzilla.clamav.net. In the report, please attach the exact eicar files that you are using. Steve On Wed, Aug 30, 2017 at 1:01 PM, Colin Rogers wrote: > Hello everyone, > > I am having some trouble getting my clamav setup to detect

Re: [clamav-users] Mirror issues and what we are doing to fix it

2017-08-30 Thread Dennis Peterson
I had the same thing happen and I also got successful dl's of the daily.cld file multiple times and I'm sure it would have continued looping forever if I'd not stopped it after observing it was stuck in a loop. Same symptoms on two separate systems. Couldn't find the cdiff file and the

[clamav-users] ClamAV not picking up Eicar file...

2017-08-30 Thread Colin Rogers
Hello everyone, I am having some trouble getting my clamav setup to detect infected files suddenly. I have downloaded various eicar test files and each one is let through clamav without any issues. Im pretty new to this but would greatly appreciate some assistance. Please let me know what I can

Re: [clamav-users] Mirror issues and what we are doing to fix it

2017-08-30 Thread Benny Pedersen
Virgo Pärna skrev den 2017-08-30 15:32: I had to remove mirrors.dat, because all mirrors were being ignored, as the output of "freshclam -v --debug" showed. After that I got updates working again. this is imho a clearly bug, would you make bugzilla to it ?

Re: [clamav-users] Mirror issues and what we are doing to fix it

2017-08-30 Thread Virgo Pärna
I had to remove mirrors.dat, because all mirrors were being ignored, as the output of "freshclam -v --debug" showed. After that I got updates working again. -- Virgo Pärna virgo.pa...@mail.ee ___ clamav-users mailing list

Re: [clamav-users] Mirror issues and what we are doing to fix it

2017-08-30 Thread Gene Heskett
On Wednesday 30 August 2017 08:48:42 Joel Esler (jesler) wrote: > Gene, > > Thanks. I’ll give this to the ops team. I had a total failure at 18:00 EDT last night: = Tue Aug 29 18:02:04 2017 -> Received signal: wake up Tue Aug 29 18:02:04 2017 -> ClamAV update process started at Tue

Re: [clamav-users] Mirror issues and what we are doing to fix it

2017-08-30 Thread Joel Esler (jesler)
Gene, Thanks. I’ll give this to the ops team. -- Joel Esler | Talos: Manager | jes...@cisco.com On Aug 28, 2017, at 2:07 PM, Gene Heskett > wrote: On Monday 28 August 2017 13:48:32 Joel Esler (jesler) wrote: As

Re: [clamav-users] DNS issue: there is a loop

2017-08-30 Thread Joel Esler (jesler)
Hans, We are aware of this issue, and I have opened a ticket with our operations team. -- Joel Esler | Talos: Manager | jes...@cisco.com On Aug 30, 2017, at 8:46 AM, MAYER Hans > wrote: Dear systems

Re: [clamav-users] DNS issue: there is a loop

2017-08-30 Thread MAYER Hans
Dear systems administrators There is a loop in your DNS definitions. Can't update. # dig database.clamav.net ; <<>> DiG 9.9.5-9+deb8u3-Debian <<>> database.clamav.net ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19930 ;; flags: qr rd ra; QUERY: 1,