Re: [clamav-users] QNAP NAS virus definition updates.

[newcomer01 via clamav-users]

i mean, there is no static ip or port, this are various as always, you can do 
an dns check for current.cvd.clamav.net


Von / From: Clamav User Mailinglist <mailto:clamav-users@lists.clamav.net>
An / To: Newcomer01 <mailto:newcome...@posteo.de>
CC / CC: Thomas Oneill <mailto:thomas.j.onei...@gmail.com>
Gesendet / Sent: Freitag, August 25, 2023 um 20:29 (at 08:29 PM) +0200
Betreff / Subject: [clamav-users] QNAP NAS virus definition updates.

Hello all!
I was wondering if anyone knows the ports or IP addresses that my QNAP NAS 
reaches out to in order to receive definition updates. I have locked down my 
firewall but would like to allow the automatic updates.

Thanks,

Tom

___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat


___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] QNAP NAS virus definition updates.

[Micah Snyder (micasnyd) via clamav-users]

Unless QNAP is customizing things or hosting their own mirror, chances are it's 
reaching out to https://database.clamav.net over port 443.

Disclaimer: I don't have any experience with QNAP devices.


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.

From: clamav-users  on behalf of Thomas 
ONeill via clamav-users 
Sent: Friday, August 25, 2023 11:29 AM
To: clamav-users@lists.clamav.net 
Cc: Thomas ONeill 
Subject: [clamav-users] QNAP NAS virus definition updates.

Hello all!
I was wondering if anyone knows the ports or IP addresses that my QNAP NAS 
reaches out to in order to receive definition updates. I have locked down my 
firewall but would like to allow the automatic updates.

Thanks,

Tom
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] QNAP NAS virus definition updates.

[Matus UHLAR - fantomas]

On 25.08.23 14:29, Thomas ONeill via clamav-users wrote:

I was wondering if anyone knows the ports or IP addresses that my QNAP NAS
reaches out to in order to receive definition updates. I have locked down
my firewall but would like to allow the automatic updates.


which QNAP NAS do you have?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
LSD will make your ECS screen display 16.7 million colors
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

[clamav-users] QNAP NAS virus definition updates.

[Thomas ONeill via clamav-users]

Hello all!
I was wondering if anyone knows the ports or IP addresses that my QNAP NAS
reaches out to in order to receive definition updates. I have locked down
my firewall but would like to allow the automatic updates.

Thanks,

Tom
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] QNAP Antivirus Updates

[Joel Esler (jesler) via clamav-users]

And… there’s your answer.  Thank you all!  I think this thread is dead.

> On Sep 21, 2021, at 2:42 PM, Liston, Daniel (DLISTON) via clamav-users 
>  wrote:
> 
> I have already forgotten the point, but I did do some DNS 
> queries from our datacenters in LON, TYO, and NYC.  All 
> reported the same results;
> 
> Non-authoritative answer:
> database.clamav.net canonical name = 
> database.clamav.net.cdn.cloudflare.net.
> Name:   database.clamav.net.cdn.cloudflare.net
> Address: 104.16.218.84
> Name:   database.clamav.net.cdn.cloudflare.net
> Address: 104.16.219.84
> 
> It seems it should be safe to specify these 2 IP addresses
> in your firewall for the updates.
> 
> 
> L8r
> Dan
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml



smime.p7s
Description: S/MIME cryptographic signature

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP Antivirus Updates

[Liston, Daniel (DLISTON) via clamav-users]

I have already forgotten the point, but I did do some DNS 
queries from our datacenters in LON, TYO, and NYC.  All 
reported the same results;

Non-authoritative answer:
database.clamav.net canonical name = database.clamav.net.cdn.cloudflare.net.
Name:   database.clamav.net.cdn.cloudflare.net
Address: 104.16.218.84
Name:   database.clamav.net.cdn.cloudflare.net
Address: 104.16.219.84

It seems it should be safe to specify these 2 IP addresses
in your firewall for the updates.


L8r
Dan

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP Antivirus Updates

[Paul Kosinski via clamav-users]

"how's this different from what Joel said?"

My reading of the following (based on normal English convention)

  > >  104.16.218.84
  > >  104.16.219.84  
  > That’s what they are for you.  Cloudflare routes you to the closest pop to 
your network.  Your mileage may vary  

is that "they" refers to the IP addresses, NOT the DNS names (which hadn't even 
been mentioned in my email at this point).

Thus, what I inferred from Joel's statement is that "database.clamav.net" might 
resolve to different IPs for other users (which would be weird, given the use 
of Anycast). So I tested it the best I could (without traveling a lot, or 
setting up VMs in different countries).


On Tue, 21 Sep 2021 13:21:20 +0200
Matus UHLAR - fantomas  wrote:

> >On Mon, 20 Sep 2021 17:17:34 +
> >"Joel Esler (jesler)"  wrote:
> >  
> >> > On Sep 20, 2021, at 13:08, Paul Kosinski via clamav-users 
> >> >  wrote:
> >> >
> >> > These two IPs are Anycast addresses, and have been unchanged for well 
> >> > over 2 years. (Anycast addresses don't have to change even if the 
> >> > physical servers change, that's their point!) They are:
> >> >
> >> >  104.16.218.84
> >> >  104.16.219.84  
> >> That’s what they are for you.  Cloudflare routes you to the closest pop to 
> >> your network.  Your mileage may vary  
> 
> On 20.09.21 20:16, Paul Kosinski via clamav-users wrote:
> >I thought the IP addresses, being Anycast, were what are routed to the 
> >closest POP.  
> 
> how's this different from what Joel said?
> 
> > No matter, when I resolve "database.clamav.net" via various DNS servers,
> > using TCP to bypass the default local DNS server (as our firewall blocks
> > outbound UDP port 53 otherwise), I always get these same two IP addresses
> > as results (see below)  
> 
> yes, becaue those two IP are anycast... they are router to the nearest POP.
> 
> > Given that the servers at 1.1.1.1, 8.8.8.8 and 9.9.9.9 are "public", and
> > likely Anycast, while 71.243.0.12 is local Verizon/FIOS, I suppose that
> > the Authoritative server and the public (Anycast) servers could
> > conceivably be distributing different IP addresses depending on who is
> > querying.  (BIND/named has become incredibly complicated these days.) But
> > since the two IP addresses are themselves Anycast, what would be the
> > point?  
> 
> the point is, not to provide different IPs via anycast DNS but to provide
> anycast IPs via any DNS.
> 
> > In any case, does anyone, anywhere, get IP addresses other than
> >
> >  104.16.218.84
> >  104.16.219.84
> >
> > when resolving "database.clamav.net"?  
> 

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP Antivirus Updates

[Joel Esler (jesler) via clamav-users]

Cool 

— 
Sent from my  iPhone

> On Sep 20, 2021, at 20:17, Paul Kosinski  wrote:
> 
> On Mon, 20 Sep 2021 17:17:34 +
> "Joel Esler (jesler)"  wrote:
> 
 On Sep 20, 2021, at 13:08, Paul Kosinski via clamav-users 
  wrote:
>>> 
>>> These two IPs are Anycast addresses, and have been unchanged for well over 
>>> 2 years. (Anycast addresses don't have to change even if the physical 
>>> servers change, that's their point!) They are:
>>> 
>>> 104.16.218.84
>>> 104.16.219.84  
>> That’s what they are for you.  Cloudflare routes you to the closest pop to 
>> your network.  Your mileage may vary
> 
> ===
> 
> I thought the IP addresses, being Anycast, were what are routed to the 
> closest POP.
> 
> No matter, when I resolve "database.clamav.net" via various DNS servers, 
> using TCP to bypass the default local DNS server (as our firewall blocks 
> outbound UDP port 53 otherwise), I always get these same two IP addresses as 
> results (see below) 
> 
> Given that the servers at 1.1.1.1, 8.8.8.8 and 9.9.9.9 are "public", and 
> likely Anycast, while 71.243.0.12 is local Verizon/FIOS, I suppose that the 
> Authoritative server and the public (Anycast) servers could conceivably be 
> distributing different IP addresses depending on who is querying. (BIND/named 
> has become incredibly complicated these days.) But since the two IP addresses 
> are themselves Anycast, what would be the point?
> 
> In any case, does anyone, anywhere, get IP addresses other than
> 
>  104.16.218.84
>  104.16.219.84
> 
> when resolving "database.clamav.net"?
> 
> 
> 
>  $ dig +tcp +all @1.1.1.1 database.clamav.net
> 
>  ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> +nocomments +nostats +nocmd +tcp +all 
> @1.1.1.1 database.clamav.net
>  ; (1 server found)
>  ;; global options: +cmd
>  ;; Got answer:
>  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5920
>  ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
> 
>  ;; QUESTION SECTION:
>  ;database.clamav.net.INA
> 
>  ;; ANSWER SECTION:
>  database.clamav.net.31INCNAME
> database.clamav.net.cdn.cloudflare.net.
>  database.clamav.net.cdn.cloudflare.net.271 IN A 104.16.219.84
>  database.clamav.net.cdn.cloudflare.net.271 IN A 104.16.218.84
> 
>  ;; Query time: 11 msec
>  ;; SERVER: 1.1.1.1#53(1.1.1.1)
>  ;; WHEN: Mon Sep 20 15:28:17 2021
>  ;; MSG SIZE  rcvd: 118
> 
>  ---
> 
>  $ dig +tcp +all @8.8.8.8 database.clamav.net
> 
>  ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> +nocomments +nostats +nocmd +tcp +all 
> @8.8.8.8 database.clamav.net
>  ; (1 server found)
>  ;; global options: +cmd
>  ;; Got answer:
>  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49012
>  ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
> 
>  ;; QUESTION SECTION:
>  ;database.clamav.net.INA
> 
>  ;; ANSWER SECTION:
>  database.clamav.net.19INCNAME
> database.clamav.net.cdn.cloudflare.net.
>  database.clamav.net.cdn.cloudflare.net.300 IN A 104.16.218.84
>  database.clamav.net.cdn.cloudflare.net.300 IN A 104.16.219.84
> 
>  ;; Query time: 31 msec
>  ;; SERVER: 8.8.8.8#53(8.8.8.8)
>  ;; WHEN: Mon Sep 20 15:21:13 2021
>  ;; MSG SIZE  rcvd: 118
> 
>  ---
> 
>  $ dig +tcp +all @9.9.9.9 database.clamav.net
> 
>  ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> +nocomments +nostats +nocmd +tcp +all 
> @9.9.9.9 database.clamav.net
>  ; (1 server found)
>  ;; global options: +cmd
>  ;; Got answer:
>  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29165
>  ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
> 
>  ;; QUESTION SECTION:
>  ;database.clamav.net.INA
> 
>  ;; ANSWER SECTION:
>  database.clamav.net.60INCNAME
> database.clamav.net.cdn.cloudflare.net.
>  database.clamav.net.cdn.cloudflare.net.300 IN A 104.16.218.84
>  database.clamav.net.cdn.cloudflare.net.300 IN A 104.16.219.84
> 
>  ;; Query time: 91 msec
>  ;; SERVER: 9.9.9.9#53(9.9.9.9)
>  ;; WHEN: Mon Sep 20 15:30:17 2021
>  ;; MSG SIZE  rcvd: 118
> 
>  ---
> 
>  $ dig +tcp +all @71.243.0.12 database.clamav.net
> 
>  ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> +nocomments +nostats +nocmd +tcp +all 
> @71.243.0.12 database.clamav.net
>  ; (1 server found)
>  ;; global options: +cmd
>  ;; Got answer:
>  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12056
>  ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
> 
>  ;; QUESTION SECTION:
>  ;database.clamav.net.INA
> 
>  ;; ANSWER SECTION:
>  database.clamav.net.60INCNAME
> database.clamav.net.cdn.cloudflare.net.
>  database.clamav.net.cdn.cloudflare.net.144 IN A 104.16.218.84
>  database.clamav.net.cdn.cloudflare.net.144 IN A 104.16.219.84
> 
>  ;; Query time: 16 msec
>  ;; SERVER: 71.243.0.12#53(71.243.0.12)
>  ;; WHEN: Mon Sep 20 15:21:39 2021
>  ;; MSG SIZE  rcvd: 118
> 
> 

Re: [clamav-users] QNAP Antivirus Updates

[Matus UHLAR - fantomas]

On Mon, 20 Sep 2021 17:17:34 +
"Joel Esler (jesler)"  wrote:


> On Sep 20, 2021, at 13:08, Paul Kosinski via clamav-users 
 wrote:
>
> These two IPs are Anycast addresses, and have been unchanged for well over 2 
years. (Anycast addresses don't have to change even if the physical servers 
change, that's their point!) They are:
>
>  104.16.218.84
>  104.16.219.84
That’s what they are for you.  Cloudflare routes you to the closest pop to your 
network.  Your mileage may vary


On 20.09.21 20:16, Paul Kosinski via clamav-users wrote:

I thought the IP addresses, being Anycast, were what are routed to the closest 
POP.


how's this different from what Joel said?


No matter, when I resolve "database.clamav.net" via various DNS servers,
using TCP to bypass the default local DNS server (as our firewall blocks
outbound UDP port 53 otherwise), I always get these same two IP addresses
as results (see below)


yes, becaue those two IP are anycast... they are router to the nearest POP.


Given that the servers at 1.1.1.1, 8.8.8.8 and 9.9.9.9 are "public", and
likely Anycast, while 71.243.0.12 is local Verizon/FIOS, I suppose that
the Authoritative server and the public (Anycast) servers could
conceivably be distributing different IP addresses depending on who is
querying.  (BIND/named has become incredibly complicated these days.) But
since the two IP addresses are themselves Anycast, what would be the
point?


the point is, not to provide different IPs via anycast DNS but to provide
anycast IPs via any DNS.


In any case, does anyone, anywhere, get IP addresses other than

 104.16.218.84
 104.16.219.84

when resolving "database.clamav.net"?


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I just got lost in thought. It was unfamiliar territory.

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP Antivirus Updates

[Paul Kosinski via clamav-users]

On Mon, 20 Sep 2021 17:17:34 +
"Joel Esler (jesler)"  wrote:

> > On Sep 20, 2021, at 13:08, Paul Kosinski via clamav-users 
> >  wrote:
> > 
> > These two IPs are Anycast addresses, and have been unchanged for well over 
> > 2 years. (Anycast addresses don't have to change even if the physical 
> > servers change, that's their point!) They are:
> > 
> >  104.16.218.84
> >  104.16.219.84  
> That’s what they are for you.  Cloudflare routes you to the closest pop to 
> your network.  Your mileage may vary

===

I thought the IP addresses, being Anycast, were what are routed to the closest 
POP.

No matter, when I resolve "database.clamav.net" via various DNS servers, using 
TCP to bypass the default local DNS server (as our firewall blocks outbound UDP 
port 53 otherwise), I always get these same two IP addresses as results (see 
below) 

Given that the servers at 1.1.1.1, 8.8.8.8 and 9.9.9.9 are "public", and likely 
Anycast, while 71.243.0.12 is local Verizon/FIOS, I suppose that the 
Authoritative server and the public (Anycast) servers could conceivably be 
distributing different IP addresses depending on who is querying. (BIND/named 
has become incredibly complicated these days.) But since the two IP addresses 
are themselves Anycast, what would be the point?

In any case, does anyone, anywhere, get IP addresses other than

  104.16.218.84
  104.16.219.84

when resolving "database.clamav.net"?
  

  
  $ dig +tcp +all @1.1.1.1 database.clamav.net
  
  ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> +nocomments +nostats +nocmd +tcp +all 
@1.1.1.1 database.clamav.net
  ; (1 server found)
  ;; global options: +cmd
  ;; Got answer:
  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5920
  ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
  
  ;; QUESTION SECTION:
  ;database.clamav.net. IN  A
  
  ;; ANSWER SECTION:
  database.clamav.net.  31  IN  CNAME   
database.clamav.net.cdn.cloudflare.net.
  database.clamav.net.cdn.cloudflare.net.   271 IN A 104.16.219.84
  database.clamav.net.cdn.cloudflare.net.   271 IN A 104.16.218.84
  
  ;; Query time: 11 msec
  ;; SERVER: 1.1.1.1#53(1.1.1.1)
  ;; WHEN: Mon Sep 20 15:28:17 2021
  ;; MSG SIZE  rcvd: 118
  
  ---
  
  $ dig +tcp +all @8.8.8.8 database.clamav.net
  
  ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> +nocomments +nostats +nocmd +tcp +all 
@8.8.8.8 database.clamav.net
  ; (1 server found)
  ;; global options: +cmd
  ;; Got answer:
  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49012
  ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
  
  ;; QUESTION SECTION:
  ;database.clamav.net. IN  A
  
  ;; ANSWER SECTION:
  database.clamav.net.  19  IN  CNAME   
database.clamav.net.cdn.cloudflare.net.
  database.clamav.net.cdn.cloudflare.net.   300 IN A 104.16.218.84
  database.clamav.net.cdn.cloudflare.net.   300 IN A 104.16.219.84
  
  ;; Query time: 31 msec
  ;; SERVER: 8.8.8.8#53(8.8.8.8)
  ;; WHEN: Mon Sep 20 15:21:13 2021
  ;; MSG SIZE  rcvd: 118
  
  ---
  
  $ dig +tcp +all @9.9.9.9 database.clamav.net
  
  ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> +nocomments +nostats +nocmd +tcp +all 
@9.9.9.9 database.clamav.net
  ; (1 server found)
  ;; global options: +cmd
  ;; Got answer:
  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29165
  ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
  
  ;; QUESTION SECTION:
  ;database.clamav.net. IN  A
  
  ;; ANSWER SECTION:
  database.clamav.net.  60  IN  CNAME   
database.clamav.net.cdn.cloudflare.net.
  database.clamav.net.cdn.cloudflare.net.   300 IN A 104.16.218.84
  database.clamav.net.cdn.cloudflare.net.   300 IN A 104.16.219.84
  
  ;; Query time: 91 msec
  ;; SERVER: 9.9.9.9#53(9.9.9.9)
  ;; WHEN: Mon Sep 20 15:30:17 2021
  ;; MSG SIZE  rcvd: 118
  
  ---
  
  $ dig +tcp +all @71.243.0.12 database.clamav.net
  
  ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> +nocomments +nostats +nocmd +tcp +all 
@71.243.0.12 database.clamav.net
  ; (1 server found)
  ;; global options: +cmd
  ;; Got answer:
  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12056
  ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
  
  ;; QUESTION SECTION:
  ;database.clamav.net. IN  A
  
  ;; ANSWER SECTION:
  database.clamav.net.  60  IN  CNAME   
database.clamav.net.cdn.cloudflare.net.
  database.clamav.net.cdn.cloudflare.net.   144 IN A 104.16.218.84
  database.clamav.net.cdn.cloudflare.net.   144 IN A 104.16.219.84
  
  ;; Query time: 16 msec
  ;; SERVER: 71.243.0.12#53(71.243.0.12)
  ;; WHEN: Mon Sep 20 15:21:39 2021
  ;; MSG SIZE  rcvd: 118



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV 

Re: [clamav-users] QNAP Antivirus Updates

[Joel Esler (jesler) via clamav-users]

> On Sep 20, 2021, at 13:08, Paul Kosinski via clamav-users 
>  wrote:
> 
> These two IPs are Anycast addresses, and have been unchanged for well over 2 
> years. (Anycast addresses don't have to change even if the physical servers 
> change, that's their point!) They are:
> 
>  104.16.218.84
>  104.16.219.84
That’s what they are for you.  Cloudflare routes you to the closest pop to your 
network.  Your mileage may vary


> I don't know if they are appropriate for non-freshclam ways of obtaining the 
> updates, e.g., updating a mirror. (And I don't know if they work world-wide.)

FreshClam or cvdupdate.  That’s what we recommend, that’s what we enforce.  Use 
one of those two or risk being cut off completely in the future.

smime.p7s
Description: S/MIME cryptographic signature

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP Antivirus Updates

[Paul Kosinski via clamav-users]

On Mon, 20 Sep 2021 08:18:01 +0100 (BST)
"G.W. Haywood via clamav-users"  wrote:

> Hi there,
> 
> On Sun, 19 Sep 2021, Gregory Poveda via clamav-users wrote:
> 
> > I have several QNAPs  
> 
> It might be worth searching for 'QNAP' in the list archives.  At least
> some of those devices will struggle to run ClamAV - or rather, ClamAV
> out of the box - for lack of memory.
> 
> > on a locked down network that have the Clamav.net antivirus package/
> > software installed. Something changed on the 16th and I have been
> > unable to get updates. I have an ACL that blocks all traffic on this
> > network unless I define its IPs/DNS addresses. I had set the two DNS
> > addresses that I had detected back in March in the ACL, those are as
> > follows: clamav.net (199.62.84.153) which appears to check if the
> > database as an update and database.clamav.net (198.148.79.54) which
> > has the update file.  
> 
> If you don't mind my saying so, that's a fragile setup.  IPs can and
> do change without notice.
> 
> > Did the DNS names change or has the database stopped providing
> > updates?  
> 
> Check the very recent thread  "Virus DB  updates?".

=

Using an ACL mechanism that uses DNS names to allow outbound traffic strikes me 
as also a setup that is either fragile or very slow. Either it does a DNS 
lookup when started, so if the DNS->IP map changes while it's running, you 
lose. Or it does a reverse DNS (PTR) lookup for every outbound SYN to see if 
it's OK, and it's slow.

In my case, I use iptables (on Linux) to block almost all outbound TCP from 
select servers, and I use two IP addresses (only) to allow ClamAV update 
traffic, from/to freshclam.

These two IPs are Anycast addresses, and have been unchanged for well over 2 
years. (Anycast addresses don't have to change even if the physical servers 
change, that's their point!) They are:

  104.16.218.84
  104.16.219.84

I don't know if they are appropriate for non-freshclam ways of obtaining the 
updates, e.g., updating a mirror. (And I don't know if they work world-wide.)

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP Antivirus Updates

[G.W. Haywood via clamav-users]

Hi there,

On Sun, 19 Sep 2021, Gregory Poveda via clamav-users wrote:


I have several QNAPs


It might be worth searching for 'QNAP' in the list archives.  At least
some of those devices will struggle to run ClamAV - or rather, ClamAV
out of the box - for lack of memory.


on a locked down network that have the Clamav.net antivirus package/
software installed. Something changed on the 16th and I have been
unable to get updates. I have an ACL that blocks all traffic on this
network unless I define its IPs/DNS addresses. I had set the two DNS
addresses that I had detected back in March in the ACL, those are as
follows: clamav.net (199.62.84.153) which appears to check if the
database as an update and database.clamav.net (198.148.79.54) which
has the update file.


If you don't mind my saying so, that's a fragile setup.  IPs can and
do change without notice.


Did the DNS names change or has the database stopped providing
updates?


Check the very recent thread  "Virus DB  updates?".

--

73,
Ged.

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] QNAP Antivirus Updates

[Gregory Poveda via clamav-users]

Hello, 

I have several QNAPs on a locked down network that have the Clamav.net 
 antivirus package/software installed. Something changed on 
the 16th and I have been unable to get updates. I have an ACL that blocks all 
traffic on this network unless I define its IPs/DNS addresses. 

I had set the two DNS addresses that I had detected back in March in the ACL, 
those are as follows: clamav.net  (199.62.84.153) which 
appears to check if the database as an update and database.clamav.net 
 (198.148.79.54) which has the update file. Did 
the DNS names change or has the database stopped providing updates? 


Thanks,
Gregory Poveda
OIT - Network Infrastructure
VBH M1D
Cell: (865) 250-0290
Office: (256) 824-7656
gap0...@uah.edu


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Qnap TS-259Pro+

[Matus UHLAR - fantomas]

On 13.07.21 19:47, Eero Volotinen wrote:

You probably need to buy newer version of qnap nas
or compile clamav from sources.


that apparently won't help - TS-259Pro+ seems to only have 1GB of RAM, where
clamav needs more (about 1.5GB on my machine)


On Tue 13. Jul 2021 at 19.41, Raymond Ng via clamav-users <
clamav-users@lists.clamav.net> wrote:

My Qnap NAS suddenly stop updating Virus signature since March.
It had a manual update but I can’t find where to download the latest
signature file at Clamav home page.
Kindly help to direct where I could download the latest signature so I
could manual update the signature.
Ive check on the Qnap Community site that there is a new version of Clamav
but it’s not compatible with my model.



this was heavily discussed and explained here and in the QNAP forum too.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I feel like I'm diagonally parked in a parallel universe.

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Qnap TS-259Pro+

[Andrew C Aitchison via clamav-users]

The TS-259Pro+ appears go have 1GB RAM, which is not really enough
to run clamav, so compiling from source is unlikely to be helpful.

On Tue, 13 Jul 2021, Eero Volotinen wrote:


You probably need to buy newer version of qnap nas
or compile clamav from sources.

Eero

On Tue 13. Jul 2021 at 19.41, Raymond Ng via clamav-users <
clamav-users@lists.clamav.net> wrote:

> My Qnap NAS suddenly stop updating Virus signature since March.
> It had a manual update but I can’t find where to download the latest
> signature file at Clamav home page.
> Kindly help to direct where I could download the latest signature so I
> could manual update the signature.
> Ive check on the Qnap Community site that there is a new version of
> Clamav
> but it’s not compatible with my model.
> 
> Regards

> *Raymond Ng*
> Sent from my iPhone
> 
> ___
> 
> clamav-users mailing list

> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:

> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
> 



--
Andrew C. Aitchison Kendal, UK
and...@aitchison.me.uk

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Qnap TS-259Pro+

[G.W. Haywood via clamav-users]

Hi there,

On Wed, 14 Jul 2021, Raymond Ng via clamav-users wrote:


My Qnap NAS suddenly stop updating Virus signature since March.
It had a manual update but I can’t find where to download the latest signature 
file at Clamav home page.
Kindly help to direct where I could download the latest signature so I could 
manual update the signature.
Ive check on the Qnap Community site that there is a new version of Clamav but 
it’s not compatible with my model.


Please search the archives of this mailing list for discussions of the
QNAP devices.  There are certainly some posts around early March 2021,
but do use a search tool to find more.

--

73,
Ged.

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Qnap TS-259Pro+

[Eero Volotinen]

You probably need to buy newer version of qnap nas
or compile clamav from sources.

Eero

On Tue 13. Jul 2021 at 19.41, Raymond Ng via clamav-users <
clamav-users@lists.clamav.net> wrote:

> My Qnap NAS suddenly stop updating Virus signature since March.
> It had a manual update but I can’t find where to download the latest
> signature file at Clamav home page.
> Kindly help to direct where I could download the latest signature so I
> could manual update the signature.
> Ive check on the Qnap Community site that there is a new version of Clamav
> but it’s not compatible with my model.
>
> Regards
> *Raymond Ng*
> Sent from my iPhone
>
> ___
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] Qnap TS-259Pro+

[Raymond Ng via clamav-users]

My Qnap NAS suddenly stop updating Virus signature since March. 
It had a manual update but I can’t find where to download the latest signature 
file at Clamav home page. 
Kindly help to direct where I could download the latest signature so I could 
manual update the signature. 
Ive check on the Qnap Community site that there is a new version of Clamav but 
it’s not compatible with my model. 

Regards 
Raymond Ng
Sent from my iPhone
___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP - Cannot update virus definition & cannot wget *.cvd (receive error 403 forbidden)

[Thomas Guerlinze via clamav-users]

Dear All,

I posted the answer of QNAP support in the wrong thread (sorry).

In short, the NAS has not sufficient memory to process the update. Only
manual update is working.

Here the answer:
The root cause is the size of the update files in the database. Because of
that the automatic updates are failing on the older NAS models. This is due
to the small CPU and memory size.
When you update manually the system get forced to update and will pause
other applications running.
So please try to perform the updates manually ones in a time.


Br,

Tom





Le lun. 8 mars 2021 à 10:53, G.W. Haywood via clamav-users <
clamav-users@lists.clamav.net> a écrit :

> Hi there,
>
> On Mon, 8 Mar 2021, Matus UHLAR - fantomas wrote:
>
> >> I tried to use the GUI provided by QNAP to update the ClamAV on the
> NAS. I
> >> received "update failed" message.
>
> I tried to look at the QNAP home page.
>
> It's over ten megabytes, so I gave up.
>
> --
>
> 73,
> Ged.
>
> ___
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP - Cannot update virus definition & cannot wget *.cvd (receive error 403 forbidden)

[G.W. Haywood via clamav-users]

Hi there,

On Mon, 8 Mar 2021, Matus UHLAR - fantomas wrote:


I tried to use the GUI provided by QNAP to update the ClamAV on the NAS. I
received "update failed" message.


I tried to look at the QNAP home page.

It's over ten megabytes, so I gave up.

--

73,
Ged.

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP - Cannot update virus definition & cannot wget *.cvd (receive error 403 forbidden)

[Matus UHLAR - fantomas]

On 07.03.21 22:48, Joel Esler (jesler) via clamav-users wrote:

So, Qnap is up to date?  But people using older versions need to update
their Qnap software?  Is that what’re your saying?


Apparently depends on HW and support.

my NAS haven't received OS update (except security) for a few years.

it's 419P+ with the same firmware Thomas Guerlinze mentions (4.3.3.1432
build 20200106) , containing:

ClamAV 0.99.3/17260/Wed May 22 12:40:22 2013

Since it's a 419P+ with 512MB of RAM, I disabled clamav long ago.

looks like QNAP only puts new clamav version to new firmware releases, not
to security updates.


It seems like the holdouts are ClamWin and Qnap.  A lot of the issues that
I have seen of versions lower than 0.100 are those two.




On Mar 7, 2021, at 17:38, Eric Tykwinski  wrote:

I’ve got a QNAP at my house.  Looks like it’s fine on the newest version:
v4.5.3.1594
Given it’s outdated, but that doesn’t surprise me much:
ClamAV 0.102.2/26100/Sat Mar  6 07:05:22 2021



On Mar 7, 2021, at 4:29 PM, Eero Volotinen  wrote:

Looks like qnap need to update to supported clamav version?



On Sun, Mar 7, 2021 at 10:54 PM Thomas Guerlinze via clamav-users 
 wrote:
I restarted an old QNAP NAS (TS419P).
I updated the firmware to the latest version available for this model 
(4.3.3.1432 build 20200106).

I tried to use the GUI provided by QNAP to update the ClamAV on the NAS. I received 
"update failed" message.

I made some searches on the ClamAV users Archives (and saw some similar 
threads) but none of them could be used to solve the issue.

If I download the .cvd files manually 
(http://database.clamav.net/bytecode/daily/main) through my browser on a PC and 
then copy them in the appropriate folder on the NAS and launch a scan, it works.
If I try to "automate" this download with WGET or CURL it does not work either 
(respectively error 403 or 1020).

I do not know how to proceed to keep a ClamAV instance update without manual 
intervention.

Thanks already for your help,


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
We are but packets in the Internet of life (userfriendly.org)

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP - Cannot update virus definition & cannot wget *.cvd (receive error 403 forbidden)

[Matus UHLAR - fantomas]

On 07.03.21 21:51, Thomas Guerlinze via clamav-users wrote:

I restarted an old QNAP NAS (TS419P).
I updated the firmware to the latest version available for this model
(4.3.3.1432 build 20200106).

I tried to use the GUI provided by QNAP to update the ClamAV on the NAS. I
received "update failed" message.

I made some searches on the ClamAV users Archives (and saw some similar
threads) but none of them could be used to solve the issue.

If I download the .cvd files manually (
http://database.clamav.net/bytecode/daily/main) through my browser on a PC
and then copy them in the appropriate folder on the NAS and launch a scan,
it works.
If I try to "automate" this download with WGET or CURL it does not work
either (respectively error 403 or 1020).

I do not know how to proceed to keep a ClamAV instance update without
manual intervention.


Hello,

I own 419P+.
It has 512MB of RAM, which is unfortunately not enough for clamav (at least
on other machines clamav uses over 1GB of RAM.

The 419P and 419P+ are old arm machines whose support ended on 12/2020.

I'm afraid that using clamav on those NASses doesn't make sense anymore
(and, already for some time).

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
2B|!2B, that's a question!

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP - Cannot update virus definition & cannot wget *.cvd (receive error 403 forbidden)

[Joel Esler (jesler) via clamav-users]

I’d take 102 over 0.99.  At least we support 102

Sent from my  iPhone

On Mar 7, 2021, at 18:16, Eric Tykwinski  wrote:

 Joel,

Of course it isn’t up to date…
Mine is running 0.102.2  so it updates, but not 103.x
He’s got an older version, so maybe that they disabled updates…  This I doubt, 
but I’m running on an intel chipset so can’t rule out.
My guess is a symbolic link is corrupt now after checking reddit real quick:
https://www.reddit.com/r/qnap/comments/dcnjzo/clamav_virus_definition_downloads_failing/

Sincerely,

Eric Tykwinski
TrueNet, Inc.
P: 610-429-8300

On Mar 7, 2021, at 5:48 PM, Joel Esler (jesler) via clamav-users 
mailto:clamav-users@lists.clamav.net>> wrote:

So, Qnap is up to date?  But people using older versions need to update their 
Qnap software?  Is that what’re your saying?

It seems like the holdouts are ClamWin and Qnap.  A lot of the issues that I 
have seen of versions lower than 0.100 are those two.

—
Sent from my  iPad

On Mar 7, 2021, at 17:38, Eric Tykwinski 
mailto:eric-l...@truenet.com>> wrote:

I’ve got a QNAP at my house.  Looks like it’s fine on the newest version:
v4.5.3.1594
Given it’s outdated, but that doesn’t surprise me much:
ClamAV 0.102.2/26100/Sat Mar  6 07:05:22 2021



Sincerely,

Eric Tykwinski
TrueNet, Inc.
P: 610-429-8300

On Mar 7, 2021, at 4:29 PM, Eero Volotinen 
mailto:eero.voloti...@iki.fi>> wrote:

Looks like qnap need to update to supported clamav version?

Eero

On Sun, Mar 7, 2021 at 10:54 PM Thomas Guerlinze via clamav-users 
mailto:clamav-users@lists.clamav.net>> wrote:
Hello All,

I restarted an old QNAP NAS (TS419P).
I updated the firmware to the latest version available for this model 
(4.3.3.1432 build 20200106).

I tried to use the GUI provided by QNAP to update the ClamAV on the NAS. I 
received "update failed" message.

I made some searches on the ClamAV users Archives (and saw some similar 
threads) but none of them could be used to solve the issue.

If I download the .cvd files manually 
(http://database.clamav.net/bytecode/daily/main) through my browser on a PC and 
then copy them in the appropriate folder on the NAS and launch a scan, it works.
If I try to "automate" this download with WGET or CURL it does not work either 
(respectively error 403 or 1020).

I do not know how to proceed to keep a ClamAV instance update without manual 
intervention.

Thanks already for your help,

Tom



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP - Cannot update virus definition & cannot wget *.cvd (receive error 403 forbidden)

[Eric Tykwinski]

Joel,

Of course it isn’t up to date…
Mine is running 0.102.2  so it updates, but not 103.x
He’s got an older version, so maybe that they disabled updates…  This I doubt, 
but I’m running on an intel chipset so can’t rule out.
My guess is a symbolic link is corrupt now after checking reddit real quick:
https://www.reddit.com/r/qnap/comments/dcnjzo/clamav_virus_definition_downloads_failing/
 


Sincerely,

Eric Tykwinski
TrueNet, Inc.
P: 610-429-8300

> On Mar 7, 2021, at 5:48 PM, Joel Esler (jesler) via clamav-users 
>  wrote:
> 
> So, Qnap is up to date?  But people using older versions need to update their 
> Qnap software?  Is that what’re your saying?
> 
> It seems like the holdouts are ClamWin and Qnap.  A lot of the issues that I 
> have seen of versions lower than 0.100 are those two.
> 
> — 
> Sent from my  iPad
> 
>> On Mar 7, 2021, at 17:38, Eric Tykwinski  wrote:
>> 
>> I’ve got a QNAP at my house.  Looks like it’s fine on the newest version:
>> v4.5.3.1594
>> Given it’s outdated, but that doesn’t surprise me much:
>> ClamAV 0.102.2/26100/Sat Mar  6 07:05:22 2021
>> 
>> 
>> 
>> Sincerely,
>> 
>> Eric Tykwinski
>> TrueNet, Inc.
>> P: 610-429-8300
>> 
>>> On Mar 7, 2021, at 4:29 PM, Eero Volotinen  wrote:
>>> 
>>> Looks like qnap need to update to supported clamav version?
>>> 
>>> Eero
>>> 
>>> On Sun, Mar 7, 2021 at 10:54 PM Thomas Guerlinze via clamav-users 
>>>  wrote:
>>> Hello All,
>>> 
>>> I restarted an old QNAP NAS (TS419P).
>>> I updated the firmware to the latest version available for this model 
>>> (4.3.3.1432 build 20200106).
>>> 
>>> I tried to use the GUI provided by QNAP to update the ClamAV on the NAS. I 
>>> received "update failed" message.
>>> 
>>> I made some searches on the ClamAV users Archives (and saw some similar 
>>> threads) but none of them could be used to solve the issue.
>>> 
>>> If I download the .cvd files manually 
>>> (http://database.clamav.net/bytecode/daily/main) through my browser on a PC 
>>> and then copy them in the appropriate folder on the NAS and launch a scan, 
>>> it works.
>>> If I try to "automate" this download with WGET or CURL it does not work 
>>> either (respectively error 403 or 1020).
>>> 
>>> I do not know how to proceed to keep a ClamAV instance update without 
>>> manual intervention.
>>> 
>>> Thanks already for your help,
>>> 
>>> Tom
>>> 
>>> 
>>> 
>>> ___
>>> 
>>> clamav-users mailing list
>>> clamav-users@lists.clamav.net
>>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>> 
>>> 
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>> 
>>> http://www.clamav.net/contact.html#ml
>>> 
>>> ___
>>> 
>>> clamav-users mailing list
>>> clamav-users@lists.clamav.net
>>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>> 
>>> 
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>> 
>>> http://www.clamav.net/contact.html#ml
>> 
>> 
>> 
>> ___
>> 
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>> 
>> 
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP - Cannot update virus definition & cannot wget *.cvd (receive error 403 forbidden)

[Joel Esler (jesler) via clamav-users]

So, Qnap is up to date?  But people using older versions need to update their 
Qnap software?  Is that what’re your saying?

It seems like the holdouts are ClamWin and Qnap.  A lot of the issues that I 
have seen of versions lower than 0.100 are those two.

— 
Sent from my  iPad

> On Mar 7, 2021, at 17:38, Eric Tykwinski  wrote:
> 
> I’ve got a QNAP at my house.  Looks like it’s fine on the newest version:
> v4.5.3.1594
> Given it’s outdated, but that doesn’t surprise me much:
> ClamAV 0.102.2/26100/Sat Mar  6 07:05:22 2021
> 
> 
> 
> Sincerely,
> 
> Eric Tykwinski
> TrueNet, Inc.
> P: 610-429-8300
> 
>> On Mar 7, 2021, at 4:29 PM, Eero Volotinen  wrote:
>> 
>> Looks like qnap need to update to supported clamav version?
>> 
>> Eero
>> 
>> On Sun, Mar 7, 2021 at 10:54 PM Thomas Guerlinze via clamav-users 
>>  wrote:
>> Hello All,
>> 
>> I restarted an old QNAP NAS (TS419P).
>> I updated the firmware to the latest version available for this model 
>> (4.3.3.1432 build 20200106).
>> 
>> I tried to use the GUI provided by QNAP to update the ClamAV on the NAS. I 
>> received "update failed" message.
>> 
>> I made some searches on the ClamAV users Archives (and saw some similar 
>> threads) but none of them could be used to solve the issue.
>> 
>> If I download the .cvd files manually 
>> (http://database.clamav.net/bytecode/daily/main) through my browser on a PC 
>> and then copy them in the appropriate folder on the NAS and launch a scan, 
>> it works.
>> If I try to "automate" this download with WGET or CURL it does not work 
>> either (respectively error 403 or 1020).
>> 
>> I do not know how to proceed to keep a ClamAV instance update without manual 
>> intervention.
>> 
>> Thanks already for your help,
>> 
>> Tom
>> 
>> 
>> 
>> ___
>> 
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>> 
>> 
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
>> 
>> ___
>> 
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>> 
>> 
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> 
> 
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml


smime.p7s
Description: S/MIME cryptographic signature

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP - Cannot update virus definition & cannot wget *.cvd (receive error 403 forbidden)

[Eric Tykwinski]

I’ve got a QNAP at my house.  Looks like it’s fine on the newest version:
v4.5.3.1594
Given it’s outdated, but that doesn’t surprise me much:
ClamAV 0.102.2/26100/Sat Mar  6 07:05:22 2021



Sincerely,

Eric Tykwinski
TrueNet, Inc.
P: 610-429-8300

> On Mar 7, 2021, at 4:29 PM, Eero Volotinen  wrote:
> 
> Looks like qnap need to update to supported clamav version?
> 
> Eero
> 
> On Sun, Mar 7, 2021 at 10:54 PM Thomas Guerlinze via clamav-users 
>  wrote:
> Hello All,
> 
> I restarted an old QNAP NAS (TS419P).
> I updated the firmware to the latest version available for this model 
> (4.3.3.1432 build 20200106).
> 
> I tried to use the GUI provided by QNAP to update the ClamAV on the NAS. I 
> received "update failed" message.
> 
> I made some searches on the ClamAV users Archives (and saw some similar 
> threads) but none of them could be used to solve the issue.
> 
> If I download the .cvd files manually 
> (http://database.clamav.net/bytecode/daily/main) through my browser on a PC 
> and then copy them in the appropriate folder on the NAS and launch a scan, it 
> works.
> If I try to "automate" this download with WGET or CURL it does not work 
> either (respectively error 403 or 1020).
> 
> I do not know how to proceed to keep a ClamAV instance update without manual 
> intervention.
> 
> Thanks already for your help,
> 
> Tom
> 
> 
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP - Cannot update virus definition & cannot wget *.cvd (receive error 403 forbidden)

[Eero Volotinen]

Looks like qnap need to update to supported clamav version?

Eero

On Sun, Mar 7, 2021 at 10:54 PM Thomas Guerlinze via clamav-users <
clamav-users@lists.clamav.net> wrote:

> Hello All,
>
> I restarted an old QNAP NAS (TS419P).
> I updated the firmware to the latest version available for this model
> (4.3.3.1432 build 20200106).
>
> I tried to use the GUI provided by QNAP to update the ClamAV on the NAS. I
> received "update failed" message.
>
> I made some searches on the ClamAV users Archives (and saw some similar
> threads) but none of them could be used to solve the issue.
>
> If I download the .cvd files manually (
> http://database.clamav.net/bytecode/daily/main) through my browser on a
> PC and then copy them in the appropriate folder on the NAS and launch a
> scan, it works.
> If I try to "automate" this download with WGET or CURL it does not work
> either (respectively error 403 or 1020).
>
> I do not know how to proceed to keep a ClamAV instance update without
> manual intervention.
>
> Thanks already for your help,
>
> Tom
>
>
>
> ___
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP - Cannot update virus definition & cannot wget *.cvd (receive error 403 forbidden)

[Arjen de Korte via clamav-users]

Citeren Thomas Guerlinze via clamav-users :


I restarted an old QNAP NAS (TS419P).
I updated the firmware to the latest version available for this model
(4.3.3.1432 build 20200106).

I tried to use the GUI provided by QNAP to update the ClamAV on the NAS. I
received "update failed" message.


Check the support forum for your device first:  
https://forum.qnap.com/viewtopic.php?t=159990



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] QNAP - Cannot update virus definition & cannot wget *.cvd (receive error 403 forbidden)

[Thomas Guerlinze via clamav-users]

Hello All,

I restarted an old QNAP NAS (TS419P).
I updated the firmware to the latest version available for this model
(4.3.3.1432 build 20200106).

I tried to use the GUI provided by QNAP to update the ClamAV on the NAS. I
received "update failed" message.

I made some searches on the ClamAV users Archives (and saw some similar
threads) but none of them could be used to solve the issue.

If I download the .cvd files manually (
http://database.clamav.net/bytecode/daily/main) through my browser on a PC
and then copy them in the appropriate folder on the NAS and launch a scan,
it works.
If I try to "automate" this download with WGET or CURL it does not work
either (respectively error 403 or 1020).

I do not know how to proceed to keep a ClamAV instance update without
manual intervention.

Thanks already for your help,

Tom

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Qnap

[Matus UHLAR - fantomas]

On 30.01.19 11:46, Joel Esler (jesler) wrote:

I’ve suddenly started receive a lot of emails from Qnap users saying they can’t 
update ClamAV anymore.  Anyone have a Qnap system that is technically inclined 
that can help me troubleshoot?


On 30.01.19 18:38, Matus UHLAR - fantomas wrote:

seems they have fscked up their new firmware version:

https://forum.qnap.com/viewtopic.php?f=50=146352=clamav


and there are rumours in the thread about malware on those QNAP systems
doing that


Since recent firmware updates, the ClamAV Antivirus fails to update due to 700+ 
clamav.net entries in /etc/hosts, all set to 0.0.0.0 e.g.

0.0.0.0 bugs.clamav.net
0.0.0.0 current.cvd.clamav.net
0.0.0.0 database.clamav.net
0.0.0.0 db.local.clamav.net
0.0.0.0 update.nai.com
0.0.0.0 db.ac.clamav.net
0.0.0.0 db.ac.ipv6.clamav.net
0.0.0.0 db.ac.big.clamav.net



--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
On the other hand, you have different fingers. 
___

clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Qnap

[Matus UHLAR - fantomas]

On 30.01.19 11:46, Joel Esler (jesler) wrote:

I’ve suddenly started receive a lot of emails from Qnap users saying they can’t 
update ClamAV anymore.  Anyone have a Qnap system that is technically inclined 
that can help me troubleshoot?


seems they have fscked up their new firmware version:

https://forum.qnap.com/viewtopic.php?f=50=146352=clamav

Since recent firmware updates, the ClamAV Antivirus fails to update due to 700+ 
clamav.net entries in /etc/hosts, all set to 0.0.0.0 e.g.

0.0.0.0 bugs.clamav.net
0.0.0.0 current.cvd.clamav.net
0.0.0.0 database.clamav.net
0.0.0.0 db.local.clamav.net
0.0.0.0 update.nai.com
0.0.0.0 db.ac.clamav.net
0.0.0.0 db.ac.ipv6.clamav.net
0.0.0.0 db.ac.big.clamav.net




--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
A day without sunshine is like, night.
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] Qnap

[Joel Esler (jesler)]

I’ve suddenly started receive a lot of emails from Qnap users saying they can’t 
update ClamAV anymore.  Anyone have a Qnap system that is technically inclined 
that can help me troubleshoot?

Sent from my  iPhone
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml