Re: [clamav-users] database updates blocked

2021-08-17 Thread Micah Snyder (micasnyd) via clamav-users 
If you're running into the CA cert problem with FreshClam because your CA 
certificate bundle is in a non-standard place, you can also set the 
CURL_CA_BUNDLE environment to point to the file holding one or more 
certificates.  FreshClam and ClamSubmit will check that environment variable 
and use it instead of the default openssl CA path.

My apologies that this isn't in the documentation (yet). I will add it today. 
https://github.com/Cisco-Talos/clamav/issues/175
[https://opengraph.githubassets.com/3a88d2ae78ed898d56aa65df2cb4612e35e2cdff07ca8efd5d0fbb78efed4d33/Cisco-Talos/clamav/issues/175]
CURL_CA_BUNDLE environment variable missing from freshclam, clamsubmit 
documentation · Issue #175 · 
Cisco-Talos/clamav
Describe the bug Missing documentation for CURL_CA_BUNDLE option to customize 
the CA bundle path. How to reproduce the problem Grep the clamav source for 
CURL_CA_BUNDLE. It only appears...
github.com



Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.

From: clamav-users  on behalf of Jona 
Tallieu 
Sent: Tuesday, August 17, 2021 5:55 AM
To: ClamAV users ML 
Subject: Re: [clamav-users] database updates blocked


Dear,



Thanks for your answer.

We are using Freshclam, the curl was a test to see what the problem was.



The logs show a SSL CA cert problem:



13:26:22.633 5 EXTFILTER(CGPClamAV) inp(059): * ClamAV update process started 
at Mon Aug 16 13:26:22 2021

13:26:22.634 5 EXTFILTER(CGPClamAV) inp(048): * WARNING: Your ClamAV 
installation is OUTDATED!

13:26:22.634 5 EXTFILTER(CGPClamAV) inp(062): * WARNING: Local version: 0.103.2 
Recommended version: 0.103.3

13:26:22.634 5 EXTFILTER(CGPClamAV) inp(069): * DON'T PANIC! Read 
https://www.clamav.net/documents/upgrading-clamav

13:26:22.634 5 EXTFILTER(CGPClamAV) inp(083): * daily database available for 
update (local version: 26231, remote version: 26265)

13:26:24.644 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * 
WARNING: Message: Problem with the SSL CA cert (path? access rights?)

13:26:24.644 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: Can't 
download daily-26232.cdiff from https://database.clamav.net/daily-26232.cdiff

13:26:24.646 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * 
WARNING: Message: Problem with the SSL CA cert (path? access rights?)

13:26:24.646 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: Can't 
download daily-26232.cdiff from https://database.clamav.net/daily-26232.cdiff

13:26:24.651 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * 
WARNING: Message: Problem with the SSL CA cert (path? access rights?)

13:26:24.651 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: Can't 
download daily-26232.cdiff from https://database.clamav.net/daily-26232.cdiff

13:26:24.651 5 EXTFILTER(CGPClamAV) inp(066): * WARNING: Incremental update 
failed, trying to download daily.cvd

13:26:24.653 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * 
WARNING: Message: Problem with the SSL CA cert (path? access rights?)

13:26:24.653 5 EXTFILTER(CGPClamAV) inp(078): * WARNING: Can't download 
daily.cvd from https://database.clamav.net/daily.cvd



But the ca-certificates package (which contains the CA roots) is the most 
recent version. Other Cloudflare hosted url’s (with the same TLS settings) work 
fine…





Best,



Jona









From: clamav-users  on behalf of "Joel 
Esler (jesler) via clamav-users" 
Reply-To: ClamAV users ML 
Date: Tuesday, 17 August 2021 at 14:45
To: ClamAV users ML 
Cc: "Joel Esler (jesler)" 
Subject: Re: [clamav-users] database updates blocked
Resent-From: 
Resent-Date: Tuesday, 17 August 2021 at 14:45



Curl is not authorized to be used to download updates.  Please use Freshclam or 
cvdupdate to download updates.



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] database updates blocked

2021-08-17 Thread Matus UHLAR - fantomas 

On 17.08.21 17:54, Eero Volotinen wrote:

https://stackoverflow.com/questions/42982143/python-requests-how-to-use-system-ca-certificates-debian-ubuntu


just want to add that in debian 9/10 python-certifi is fine for python2, or
python3-certifi for python3 in debian 9 to 11

(the article is over 4 years old which is before debian 9 came out)


On Tue, Aug 17, 2021 at 5:50 PM Joel Esler (jesler) via clamav-users <
clamav-users@lists.clamav.net> wrote:

Yes this, isn’t the server blocking you.  You have a problem with your
local CA store.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
BSE = Mad Cow Desease ... BSA = Mad Software Producents Desease

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] database updates blocked

2021-08-17 Thread Eero Volotinen 
Solution:

https://stackoverflow.com/questions/42982143/python-requests-how-to-use-system-ca-certificates-debian-ubuntu



Eero

On Tue, Aug 17, 2021 at 5:50 PM Joel Esler (jesler) via clamav-users <
clamav-users@lists.clamav.net> wrote:

> Thank you Eero.
>
> Yes this, isn’t the server blocking you.  You have a problem with your
> local CA store.
>
> —
> Sent from my  iPad
>
> On Aug 17, 2021, at 09:11, Eero Volotinen  wrote:
>
> 
> Please note that python uses different ca locations.
>
> You can see my message on this mailing list some months ago related to
> same issue
>
>
> Eero
>
> On Tue 17. Aug 2021 at 15.57, Jona Tallieu  wrote:
>
>> Dear,
>>
>>
>>
>> Thanks for your answer.
>>
>> We are using Freshclam, the curl was a test to see what the problem was.
>>
>>
>>
>> The logs show a SSL CA cert problem:
>>
>>
>>
>> 13:26:22.633 5 EXTFILTER(CGPClamAV) inp(059): * ClamAV update process
>> started at Mon Aug 16 13:26:22 2021
>>
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(048): * WARNING: Your ClamAV
>> installation is OUTDATED!
>>
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(062): * WARNING: Local version:
>> 0.103.2 Recommended version: 0.103.3
>>
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(069): * DON'T PANIC! Read
>> https://www.clamav.net/documents/upgrading-clamav
>>
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(083): * daily database available
>> for update (local version: 26231, remote version: 26265)
>>
>> 13:26:24.644 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed
>> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>>
>> 13:26:24.644 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch:
>> Can't download daily-26232.cdiff from
>> https://database.clamav.net/daily-26232.cdiff
>>
>> 13:26:24.646 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed
>> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>>
>> 13:26:24.646 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch:
>> Can't download daily-26232.cdiff from
>> https://database.clamav.net/daily-26232.cdiff
>>
>> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed
>> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>>
>> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch:
>> Can't download daily-26232.cdiff from
>> https://database.clamav.net/daily-26232.cdiff
>>
>> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(066): * WARNING: Incremental
>> update failed, trying to download daily.cvd
>>
>> 13:26:24.653 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed
>> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>>
>> 13:26:24.653 5 EXTFILTER(CGPClamAV) inp(078): * WARNING: Can't download
>> daily.cvd from https://database.clamav.net/daily.cvd
>>
>>
>>
>> But the ca-certificates package (which contains the CA roots) is the most
>> recent version. Other Cloudflare hosted url’s (with the same TLS settings)
>> work fine…
>>
>>
>>
>>
>>
>> Best,
>>
>>
>>
>> Jona
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> *From: *clamav-users  on behalf
>> of "Joel Esler (jesler) via clamav-users" 
>> *Reply-To: *ClamAV users ML 
>> *Date: *Tuesday, 17 August 2021 at 14:45
>> *To: *ClamAV users ML 
>> *Cc: *"Joel Esler (jesler)" 
>> *Subject: *Re: [clamav-users] database updates blocked
>> *Resent-From: *
>> *Resent-Date: *Tuesday, 17 August 2021 at 14:45
>>
>>
>>
>> Curl is not authorized to be used to download updates.  Please use
>> Freshclam or cvdupdate to download updates.
>>
>>
>>
>>
>> ___
>>
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
>>
>
> ___
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
>
> ___
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] database updates blocked

2021-08-17 Thread Joel Esler (jesler) via clamav-users 
Thank you Eero.

Yes this, isn’t the server blocking you.  You have a problem with your local CA 
store.

— 
Sent from my  iPad

> On Aug 17, 2021, at 09:11, Eero Volotinen  wrote:
> 
> 
> Please note that python uses different ca locations.
> 
> You can see my message on this mailing list some months ago related to same 
> issue
> 
> 
> Eero
> 
>> On Tue 17. Aug 2021 at 15.57, Jona Tallieu  wrote:
>> Dear,
>> 
>>  
>> 
>> Thanks for your answer.
>> 
>> We are using Freshclam, the curl was a test to see what the problem was.
>> 
>>  
>> 
>> The logs show a SSL CA cert problem:
>> 
>>  
>> 
>> 13:26:22.633 5 EXTFILTER(CGPClamAV) inp(059): * ClamAV update process 
>> started at Mon Aug 16 13:26:22 2021
>> 
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(048): * WARNING: Your ClamAV 
>> installation is OUTDATED!
>> 
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(062): * WARNING: Local version: 
>> 0.103.2 Recommended version: 0.103.3
>> 
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(069): * DON'T PANIC! Read 
>> https://www.clamav.net/documents/upgrading-clamav
>> 
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(083): * daily database available for 
>> update (local version: 26231, remote version: 26265)
>> 
>> 13:26:24.644 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed 
>> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>> 
>> 13:26:24.644 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: 
>> Can't download daily-26232.cdiff from 
>> https://database.clamav.net/daily-26232.cdiff
>> 
>> 13:26:24.646 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed 
>> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>> 
>> 13:26:24.646 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: 
>> Can't download daily-26232.cdiff from 
>> https://database.clamav.net/daily-26232.cdiff
>> 
>> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed 
>> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>> 
>> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: 
>> Can't download daily-26232.cdiff from 
>> https://database.clamav.net/daily-26232.cdiff
>> 
>> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(066): * WARNING: Incremental update 
>> failed, trying to download daily.cvd
>> 
>> 13:26:24.653 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed 
>> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>> 
>> 13:26:24.653 5 EXTFILTER(CGPClamAV) inp(078): * WARNING: Can't download 
>> daily.cvd from https://database.clamav.net/daily.cvd
>> 
>>  
>> 
>> But the ca-certificates package (which contains the CA roots) is the most 
>> recent version. Other Cloudflare hosted url’s (with the same TLS settings) 
>> work fine…
>> 
>>  
>> 
>>  
>> 
>> Best,
>> 
>>  
>> 
>> Jona
>> 
>>  
>> 
>>  
>> 
>>  
>> 
>>  
>> 
>> From: clamav-users  on behalf of 
>> "Joel Esler (jesler) via clamav-users" 
>> Reply-To: ClamAV users ML 
>> Date: Tuesday, 17 August 2021 at 14:45
>> To: ClamAV users ML 
>> Cc: "Joel Esler (jesler)" 
>> Subject: Re: [clamav-users] database updates blocked
>> Resent-From: 
>> Resent-Date: Tuesday, 17 August 2021 at 14:45
>> 
>>  
>> 
>> Curl is not authorized to be used to download updates.  Please use Freshclam 
>> or cvdupdate to download updates. 
>> 
>>  
>> 
>> 
>> ___
>> 
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>> 
>> 
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml


smime.p7s
Description: S/MIME cryptographic signature

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] database updates blocked

2021-08-17 Thread Eero Volotinen 
Please note that python uses different ca locations.

You can see my message on this mailing list some months ago related to same
issue


Eero

On Tue 17. Aug 2021 at 15.57, Jona Tallieu  wrote:

> Dear,
>
>
>
> Thanks for your answer.
>
> We are using Freshclam, the curl was a test to see what the problem was.
>
>
>
> The logs show a SSL CA cert problem:
>
>
>
> 13:26:22.633 5 EXTFILTER(CGPClamAV) inp(059): * ClamAV update process
> started at Mon Aug 16 13:26:22 2021
>
> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(048): * WARNING: Your ClamAV
> installation is OUTDATED!
>
> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(062): * WARNING: Local version:
> 0.103.2 Recommended version: 0.103.3
>
> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(069): * DON'T PANIC! Read
> https://www.clamav.net/documents/upgrading-clamav
>
> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(083): * daily database available
> for update (local version: 26231, remote version: 26265)
>
> 13:26:24.644 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed
> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>
> 13:26:24.644 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch:
> Can't download daily-26232.cdiff from
> https://database.clamav.net/daily-26232.cdiff
>
> 13:26:24.646 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed
> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>
> 13:26:24.646 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch:
> Can't download daily-26232.cdiff from
> https://database.clamav.net/daily-26232.cdiff
>
> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed
> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>
> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch:
> Can't download daily-26232.cdiff from
> https://database.clamav.net/daily-26232.cdiff
>
> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(066): * WARNING: Incremental
> update failed, trying to download daily.cvd
>
> 13:26:24.653 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed
> (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>
> 13:26:24.653 5 EXTFILTER(CGPClamAV) inp(078): * WARNING: Can't download
> daily.cvd from https://database.clamav.net/daily.cvd
>
>
>
> But the ca-certificates package (which contains the CA roots) is the most
> recent version. Other Cloudflare hosted url’s (with the same TLS settings)
> work fine…
>
>
>
>
>
> Best,
>
>
>
> Jona
>
>
>
>
>
>
>
>
>
> *From: *clamav-users  on behalf of
> "Joel Esler (jesler) via clamav-users" 
> *Reply-To: *ClamAV users ML 
> *Date: *Tuesday, 17 August 2021 at 14:45
> *To: *ClamAV users ML 
> *Cc: *"Joel Esler (jesler)" 
> *Subject: *Re: [clamav-users] database updates blocked
> *Resent-From: *
> *Resent-Date: *Tuesday, 17 August 2021 at 14:45
>
>
>
> Curl is not authorized to be used to download updates.  Please use
> Freshclam or cvdupdate to download updates.
>
>
>
>
> ___
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] database updates blocked

2021-08-17 Thread Jona Tallieu 
Dear,

Thanks for your answer.
We are using Freshclam, the curl was a test to see what the problem was.

The logs show a SSL CA cert problem:

13:26:22.633 5 EXTFILTER(CGPClamAV) inp(059): * ClamAV update process started 
at Mon Aug 16 13:26:22 2021
13:26:22.634 5 EXTFILTER(CGPClamAV) inp(048): * WARNING: Your ClamAV 
installation is OUTDATED!
13:26:22.634 5 EXTFILTER(CGPClamAV) inp(062): * WARNING: Local version: 0.103.2 
Recommended version: 0.103.3
13:26:22.634 5 EXTFILTER(CGPClamAV) inp(069): * DON'T PANIC! Read 
https://www.clamav.net/documents/upgrading-clamav
13:26:22.634 5 EXTFILTER(CGPClamAV) inp(083): * daily database available for 
update (local version: 26231, remote version: 26265)
13:26:24.644 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * 
WARNING: Message: Problem with the SSL CA cert (path? access rights?)
13:26:24.644 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: Can't 
download daily-26232.cdiff from https://database.clamav.net/daily-26232.cdiff
13:26:24.646 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * 
WARNING: Message: Problem with the SSL CA cert (path? access rights?)
13:26:24.646 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: Can't 
download daily-26232.cdiff from https://database.clamav.net/daily-26232.cdiff
13:26:24.651 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * 
WARNING: Message: Problem with the SSL CA cert (path? access rights?)
13:26:24.651 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: Can't 
download daily-26232.cdiff from https://database.clamav.net/daily-26232.cdiff
13:26:24.651 5 EXTFILTER(CGPClamAV) inp(066): * WARNING: Incremental update 
failed, trying to download daily.cvd
13:26:24.653 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * 
WARNING: Message: Problem with the SSL CA cert (path? access rights?)
13:26:24.653 5 EXTFILTER(CGPClamAV) inp(078): * WARNING: Can't download 
daily.cvd from https://database.clamav.net/daily.cvd

But the ca-certificates package (which contains the CA roots) is the most 
recent version. Other Cloudflare hosted url’s (with the same TLS settings) work 
fine…


Best,

Jona




From: clamav-users  on behalf of "Joel 
Esler (jesler) via clamav-users" 
Reply-To: ClamAV users ML 
Date: Tuesday, 17 August 2021 at 14:45
To: ClamAV users ML 
Cc: "Joel Esler (jesler)" 
Subject: Re: [clamav-users] database updates blocked
Resent-From: 
Resent-Date: Tuesday, 17 August 2021 at 14:45

Curl is not authorized to be used to download updates.  Please use Freshclam or 
cvdupdate to download updates.


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] database updates blocked

2021-08-17 Thread Joel Esler (jesler) via clamav-users 
Curl is not authorized to be used to download updates.  Please use Freshclam or 
cvdupdate to download updates.

—
Sent from my  iPhone

On Aug 17, 2021, at 08:33, Jona Tallieu  wrote:


Dear all,

Since a few days, our database updates are blocked:

HTTP 403 (forbidden)
> Cloudflare Error 1020: Access Denied indicates that you’ve violated a 
> firewall rule and your connection request has been blocked.

mail:~# curl https://database.clamav.net/daily-26232.cdiff -i
HTTP/2 403
date: Thu, 12 Aug 2021 14:43:35 GMT
content-type: text/plain; charset=UTF-8
content-length: 16
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, 
post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
expect-ct: max-age=604800, 
report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct;
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 67da7a1038b02e50-BRU

error code: 1020

We are using a custom build version of ClamAV, but still using Freshclam for 
all updates (ClamAV engine v0.103.2).
We are updating once every hour.

What can we do to fix this? Or who do we contact? Thank you.


Regards,


Jona




___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] database updates blocked

2021-08-17 Thread Jona Tallieu 
Dear all,

Since a few days, our database updates are blocked:

HTTP 403 (forbidden)
> Cloudflare Error 1020: Access Denied indicates that you’ve violated a 
> firewall rule and your connection request has been blocked.

mail:~# curl https://database.clamav.net/daily-26232.cdiff -i
HTTP/2 403
date: Thu, 12 Aug 2021 14:43:35 GMT
content-type: text/plain; charset=UTF-8
content-length: 16
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, 
post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
expect-ct: max-age=604800, 
report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct;
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 67da7a1038b02e50-BRU

error code: 1020

We are using a custom build version of ClamAV, but still using Freshclam for 
all updates (ClamAV engine v0.103.2).
We are updating once every hour.

What can we do to fix this? Or who do we contact? Thank you.


Regards,


Jona




___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml