subject:"\[clamav\-users\] VirusDB Updates Broken\?"

Re: [clamav-users] VirusDB Updates Broken?

2018-06-28 Thread Joel Esler (jesler)

I've not changing anything in the past 24 hours or so, so everything should be 
fine.  

> On Jun 28, 2018, at 2:51 AM, Michael Da Cova  wrote:
> 
> Hi 
> 
> We seem to be having issues again this morning, I have delete the mirrors.dat 
> file we use gb
> 
> Retrieving http://database.clamav.net/daily.cvd
> Ignoring mirror 104.16.185.138 (due to previous errors)
> Ignoring mirror 104.16.188.138 (due to previous errors)
> Ignoring mirror 104.16.186.138 (due to previous errors)
> Ignoring mirror 104.16.187.138 (due to previous errors)
> Ignoring mirror 104.16.189.138 (due to previous errors)
> Ignoring mirror 2400:cb00:2048:1::6810:bd8a (due to previous errors)
> Ignoring mirror 2400:cb00:2048:1::6810:ba8a (due to previous errors)
> Ignoring mirror 2400:cb00:2048:1::6810:bc8a (due to previous errors)
> Ignoring mirror 2400:cb00:2048:1::6810:b98a (due to previous errors)
> Ignoring mirror 2400:cb00:2048:1::6810:bb8a (due to previous errors)
> ERROR: Can't download daily.cvd from database.clamav.net
> Giving up on database.clamav.net...
> 
> -Original Message-
> From: clamav-users  On Behalf Of Joel 
> Esler (jesler)
> Sent: 27 June 2018 13:00
> To: steveb_cla...@sanesecurity.com; ClamAV users ML 
> 
> Subject: Re: [clamav-users] VirusDB Updates Broken?.
> 
> Thanks Steve.  
> 
> We’re keeping an eye on it.  Yesterday we pushed just over 200 TB of updates 
> through Cloudflare.  It looks like a large amount of them were from people 
> who haven’t been able to get updates in a long time.  I may write a blog post 
> about it.  Kind of interesting. 
> 
> Sent from my iPhone
> 
>> On Jun 27, 2018, at 06:40, Steve Basford  
>> wrote:
>> 
>> 
>>> On Wed, June 27, 2018 11:32 am, Joel Esler (jesler) wrote:
>>> Just fixed it.
>>> 
>>> 
>> Thanks Joel... all working now...
>> 
>> main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, builder:
>> sigmgr
>> )
>> Downloading daily-24686.cdiff [100%]
>> Downloading daily-24687.cdiff [100%]
>> Downloading daily-24688.cdiff [100%]
>> Downloading daily-24689.cdiff [100%]
>> Downloading daily-24690.cdiff [100%]
>> Downloading daily-24691.cdiff [100%]
>> Downloading daily-24692.cdiff [100%]
>> Downloading daily-24693.cdiff [100%]
>> Downloading daily-24694.cdiff [100%]
>> Downloading daily-24695.cdiff [100%]
>> Downloading daily-24696.cdiff [100%]
>> Downloading daily-24697.cdiff [100%]
>> Downloading daily-24698.cdiff [100%]
>> Downloading daily-24699.cdiff [100%]
>> Downloading daily-24700.cdiff [100%]
>> daily.cld updated (version: 24700, sigs: 1995321, f-level: 63, 
>> builder: neo) Downloading bytecode-322.cdiff [100%] bytecode.cld 
>> updated (version: 322, sigs: 90, f-level: 63, builder: neo) Database 
>> updated (6561660 signatures) from db.gb.clamav.net (IP:
>> 104.16.185.138)
>> 
>> --
>> Cheers,
>> 
>> Steve
>> Twitter: @sanesecurity
>> 
>> ___
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>> 
>> 
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-28 Thread Al Varnell

Any time you see “(due to previous errors)” it always means you need to delete 
mirrors.dat, so either you failed to do so or you had too many failures after 
and need to do it again. 

Sent from my iPad

-Al-

> On Jun 27, 2018, at 23:51, Michael Da Cova  wrote:
> 
> Hi 
> 
> We seem to be having issues again this morning, I have delete the mirrors.dat 
> file we use gb
> 
> Retrieving http://database.clamav.net/daily.cvd
> Ignoring mirror 104.16.185.138 (due to previous errors)
> Ignoring mirror 104.16.188.138 (due to previous errors)
> Ignoring mirror 104.16.186.138 (due to previous errors)
> Ignoring mirror 104.16.187.138 (due to previous errors)
> Ignoring mirror 104.16.189.138 (due to previous errors)
> Ignoring mirror 2400:cb00:2048:1::6810:bd8a (due to previous errors)
> Ignoring mirror 2400:cb00:2048:1::6810:ba8a (due to previous errors)
> Ignoring mirror 2400:cb00:2048:1::6810:bc8a (due to previous errors)
> Ignoring mirror 2400:cb00:2048:1::6810:b98a (due to previous errors)
> Ignoring mirror 2400:cb00:2048:1::6810:bb8a (due to previous errors)
> ERROR: Can't download daily.cvd from database.clamav.net
> Giving up on database.clamav.net...
> 
> -Original Message-
> From: clamav-users  On Behalf Of Joel 
> Esler (jesler)
> Sent: 27 June 2018 13:00
> To: steveb_cla...@sanesecurity.com; ClamAV users ML 
> 
> Subject: Re: [clamav-users] VirusDB Updates Broken?.
> 
> Thanks Steve.  
> 
> We’re keeping an eye on it.  Yesterday we pushed just over 200 TB of updates 
> through Cloudflare.  It looks like a large amount of them were from people 
> who haven’t been able to get updates in a long time.  I may write a blog post 
> about it.  Kind of interesting. 
> 
> Sent from my iPhone
> 
>> On Jun 27, 2018, at 06:40, Steve Basford  
>> wrote:
>> 
>> 
>>> On Wed, June 27, 2018 11:32 am, Joel Esler (jesler) wrote:
>>> Just fixed it.
>>> 
>>> 
>> Thanks Joel... all working now...
>> 
>> main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, builder:
>> sigmgr
>> )
>> Downloading daily-24686.cdiff [100%]
>> Downloading daily-24687.cdiff [100%]
>> Downloading daily-24688.cdiff [100%]
>> Downloading daily-24689.cdiff [100%]
>> Downloading daily-24690.cdiff [100%]
>> Downloading daily-24691.cdiff [100%]
>> Downloading daily-24692.cdiff [100%]
>> Downloading daily-24693.cdiff [100%]
>> Downloading daily-24694.cdiff [100%]
>> Downloading daily-24695.cdiff [100%]
>> Downloading daily-24696.cdiff [100%]
>> Downloading daily-24697.cdiff [100%]
>> Downloading daily-24698.cdiff [100%]
>> Downloading daily-24699.cdiff [100%]
>> Downloading daily-24700.cdiff [100%]
>> daily.cld updated (version: 24700, sigs: 1995321, f-level: 63, 
>> builder: neo) Downloading bytecode-322.cdiff [100%] bytecode.cld 
>> updated (version: 322, sigs: 90, f-level: 63, builder: neo) Database 
>> updated (6561660 signatures) from db.gb.clamav.net (IP:
>> 104.16.185.138)
>> 
>> --
>> Cheers,
>> 
>> Steve
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-28 Thread Michael Da Cova

Hi 

We seem to be having issues again this morning, I have delete the mirrors.dat 
file we use gb

Retrieving http://database.clamav.net/daily.cvd
Ignoring mirror 104.16.185.138 (due to previous errors)
Ignoring mirror 104.16.188.138 (due to previous errors)
Ignoring mirror 104.16.186.138 (due to previous errors)
Ignoring mirror 104.16.187.138 (due to previous errors)
Ignoring mirror 104.16.189.138 (due to previous errors)
Ignoring mirror 2400:cb00:2048:1::6810:bd8a (due to previous errors)
Ignoring mirror 2400:cb00:2048:1::6810:ba8a (due to previous errors)
Ignoring mirror 2400:cb00:2048:1::6810:bc8a (due to previous errors)
Ignoring mirror 2400:cb00:2048:1::6810:b98a (due to previous errors)
Ignoring mirror 2400:cb00:2048:1::6810:bb8a (due to previous errors)
ERROR: Can't download daily.cvd from database.clamav.net
Giving up on database.clamav.net...

-Original Message-
From: clamav-users  On Behalf Of Joel 
Esler (jesler)
Sent: 27 June 2018 13:00
To: steveb_cla...@sanesecurity.com; ClamAV users ML 

Subject: Re: [clamav-users] VirusDB Updates Broken?.

Thanks Steve.  

We’re keeping an eye on it.  Yesterday we pushed just over 200 TB of updates 
through Cloudflare.  It looks like a large amount of them were from people who 
haven’t been able to get updates in a long time.  I may write a blog post about 
it.  Kind of interesting. 

Sent from my iPhone

> On Jun 27, 2018, at 06:40, Steve Basford  
> wrote:
> 
> 
>> On Wed, June 27, 2018 11:32 am, Joel Esler (jesler) wrote:
>> Just fixed it.
>> 
>> 
> Thanks Joel... all working now...
> 
> main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, builder:
> sigmgr
> )
> Downloading daily-24686.cdiff [100%]
> Downloading daily-24687.cdiff [100%]
> Downloading daily-24688.cdiff [100%]
> Downloading daily-24689.cdiff [100%]
> Downloading daily-24690.cdiff [100%]
> Downloading daily-24691.cdiff [100%]
> Downloading daily-24692.cdiff [100%]
> Downloading daily-24693.cdiff [100%]
> Downloading daily-24694.cdiff [100%]
> Downloading daily-24695.cdiff [100%]
> Downloading daily-24696.cdiff [100%]
> Downloading daily-24697.cdiff [100%]
> Downloading daily-24698.cdiff [100%]
> Downloading daily-24699.cdiff [100%]
> Downloading daily-24700.cdiff [100%]
> daily.cld updated (version: 24700, sigs: 1995321, f-level: 63, 
> builder: neo) Downloading bytecode-322.cdiff [100%] bytecode.cld 
> updated (version: 322, sigs: 90, f-level: 63, builder: neo) Database 
> updated (6561660 signatures) from db.gb.clamav.net (IP:
> 104.16.185.138)
> 
> --
> Cheers,
> 
> Steve
> Twitter: @sanesecurity
> 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-27 Thread Joel Esler (jesler)

Thanks Steve.  

We’re keeping an eye on it.  Yesterday we pushed just over 200 TB of updates 
through Cloudflare.  It looks like a large amount of them were from people who 
haven’t been able to get updates in a long time.  I may write a blog post about 
it.  Kind of interesting. 

Sent from my iPhone

> On Jun 27, 2018, at 06:40, Steve Basford  
> wrote:
> 
> 
>> On Wed, June 27, 2018 11:32 am, Joel Esler (jesler) wrote:
>> Just fixed it.
>> 
>> 
> Thanks Joel... all working now...
> 
> main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, builder:
> sigmgr
> )
> Downloading daily-24686.cdiff [100%]
> Downloading daily-24687.cdiff [100%]
> Downloading daily-24688.cdiff [100%]
> Downloading daily-24689.cdiff [100%]
> Downloading daily-24690.cdiff [100%]
> Downloading daily-24691.cdiff [100%]
> Downloading daily-24692.cdiff [100%]
> Downloading daily-24693.cdiff [100%]
> Downloading daily-24694.cdiff [100%]
> Downloading daily-24695.cdiff [100%]
> Downloading daily-24696.cdiff [100%]
> Downloading daily-24697.cdiff [100%]
> Downloading daily-24698.cdiff [100%]
> Downloading daily-24699.cdiff [100%]
> Downloading daily-24700.cdiff [100%]
> daily.cld updated (version: 24700, sigs: 1995321, f-level: 63, builder: neo)
> Downloading bytecode-322.cdiff [100%]
> bytecode.cld updated (version: 322, sigs: 90, f-level: 63, builder: neo)
> Database updated (6561660 signatures) from db.gb.clamav.net (IP:
> 104.16.185.138)
> 
> -- 
> Cheers,
> 
> Steve
> Twitter: @sanesecurity
> 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-27 Thread Steve Basford



On Wed, June 27, 2018 11:32 am, Joel Esler (jesler) wrote:
> Just fixed it.
>
>
Thanks Joel... all working now...

main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, builder:
sigmgr
)
Downloading daily-24686.cdiff [100%]
Downloading daily-24687.cdiff [100%]
Downloading daily-24688.cdiff [100%]
Downloading daily-24689.cdiff [100%]
Downloading daily-24690.cdiff [100%]
Downloading daily-24691.cdiff [100%]
Downloading daily-24692.cdiff [100%]
Downloading daily-24693.cdiff [100%]
Downloading daily-24694.cdiff [100%]
Downloading daily-24695.cdiff [100%]
Downloading daily-24696.cdiff [100%]
Downloading daily-24697.cdiff [100%]
Downloading daily-24698.cdiff [100%]
Downloading daily-24699.cdiff [100%]
Downloading daily-24700.cdiff [100%]
daily.cld updated (version: 24700, sigs: 1995321, f-level: 63, builder: neo)
Downloading bytecode-322.cdiff [100%]
bytecode.cld updated (version: 322, sigs: 90, f-level: 63, builder: neo)
Database updated (6561660 signatures) from db.gb.clamav.net (IP:
104.16.185.138)

-- 
Cheers,

Steve
Twitter: @sanesecurity

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-27 Thread Joel Esler (jesler)

Just fixed it. 

Sent from my iPhone

> On Jun 27, 2018, at 04:54, Michael Da Cova  wrote:
> 
> same here getting errors with the gb sites
> 
> 
>> On 27/06/18 09:45, Steve Basford wrote:
>>> On Wed, June 27, 2018 2:42 am, Joel Esler (jesler) wrote:
>>> Db.us should be good on both now.
>>> 
>>> Worked perfectly from California, but with .cdiff updates, not the entire
>> 
>> Just checked and gb doesn't work
>> 
>> 
>> ClamAV update process started at Wed Jun 27 09:37:20 2018
>> WARNING: Your ClamAV installation is OUTDATED!
>> WARNING: Local version: clamav-0.99.4 Recommended version: 0.100.0
>> DON'T PANIC! Read http://www.clamav.net/documents/upgrading-clamav
>> main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, builder:
>> sigmgr
>> )
>> WARNING: Can't get information about db.gb.clamav.net: Unknown error
>> WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
>> WARNING: Can't get information about db.gb.clamav.net: Unknown error
>> WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
>> WARNING: Can't get information about db.gb.clamav.net: Unknown error
>> WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
>> WARNING: Can't get information about db.gb.clamav.net: Unknown error
>> WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
>> WARNING: Can't get information about db.gb.clamav.net: Unknown error
>> WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
>> WARNING: Incremental update failed, trying to download daily.cvd
>> WARNING: Can't get information about db.gb.clamav.net: Unknown error
>> WARNING: Can't download daily.cvd from db.gb.clamav.net
>> 
>> I then checked...
>> 
>> ping db.gb.clamav.net
>> 
>> 
>> Which fails to ping
>> 
>> Where as us works
>> 
>> ping db.us.clamav.net
>> 
>> Pinging db.us.clamav.net.cdn.cloudflare.net [104.16.187.138] with 32 bytes
>> of data:
>> 
>> Reply from 104.16.187.138: bytes=32 time=22ms TTL=60
>> Reply from 104.16.187.138: bytes=32 time=25ms TTL=60
>> 
>> uk workds
>> 
>> ping db.uk.clamav.net
>> 
>> Pinging db.uk.clamav.net.cdn.cloudflare.net [104.16.188.138] with 32 bytes
>> of data:
>> 
>> Reply from 104.16.188.138: bytes=32 time=29ms TTL=60
>> 
>> 
>> So, db.gb.clamav.net needs fixing
> 
> -- 
> NetPilot Support
> Tel: 01173 357335
> Web: http://www.netpilot.com/netpilot/support/
> 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-27 Thread Joel Esler (jesler)

Okay, that should be fixed.  

Sent from my iPhone

> On Jun 27, 2018, at 04:46, Steve Basford  
> wrote:
> 
> 
>> On Wed, June 27, 2018 2:42 am, Joel Esler (jesler) wrote:
>> Db.us should be good on both now.
>> 
> 
>> Worked perfectly from California, but with .cdiff updates, not the entire
> 
> 
> Just checked and gb doesn't work
> 
> 
> ClamAV update process started at Wed Jun 27 09:37:20 2018
> WARNING: Your ClamAV installation is OUTDATED!
> WARNING: Local version: clamav-0.99.4 Recommended version: 0.100.0
> DON'T PANIC! Read http://www.clamav.net/documents/upgrading-clamav
> main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, builder:
> sigmgr
> )
> WARNING: Can't get information about db.gb.clamav.net: Unknown error
> WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
> WARNING: Can't get information about db.gb.clamav.net: Unknown error
> WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
> WARNING: Can't get information about db.gb.clamav.net: Unknown error
> WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
> WARNING: Can't get information about db.gb.clamav.net: Unknown error
> WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
> WARNING: Can't get information about db.gb.clamav.net: Unknown error
> WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
> WARNING: Incremental update failed, trying to download daily.cvd
> WARNING: Can't get information about db.gb.clamav.net: Unknown error
> WARNING: Can't download daily.cvd from db.gb.clamav.net
> 
> I then checked...
> 
> ping db.gb.clamav.net
> 
> 
> Which fails to ping
> 
> Where as us works
> 
> ping db.us.clamav.net
> 
> Pinging db.us.clamav.net.cdn.cloudflare.net [104.16.187.138] with 32 bytes
> of data:
> 
> Reply from 104.16.187.138: bytes=32 time=22ms TTL=60
> Reply from 104.16.187.138: bytes=32 time=25ms TTL=60
> 
> uk workds
> 
> ping db.uk.clamav.net
> 
> Pinging db.uk.clamav.net.cdn.cloudflare.net [104.16.188.138] with 32 bytes
> of data:
> 
> Reply from 104.16.188.138: bytes=32 time=29ms TTL=60
> 
> 
> So, db.gb.clamav.net needs fixing
> -- 
> Cheers,
> 
> Steve
> Twitter: @sanesecurity
> 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-27 Thread Michael Da Cova


same here getting errors with the gb sites


On 27/06/18 09:45, Steve Basford wrote:

On Wed, June 27, 2018 2:42 am, Joel Esler (jesler) wrote:

Db.us should be good on both now.

Worked perfectly from California, but with .cdiff updates, not the entire


Just checked and gb doesn't work


ClamAV update process started at Wed Jun 27 09:37:20 2018
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: clamav-0.99.4 Recommended version: 0.100.0
DON'T PANIC! Read http://www.clamav.net/documents/upgrading-clamav
main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, builder:
sigmgr
)
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: Can't download daily.cvd from db.gb.clamav.net

I then checked...

ping db.gb.clamav.net


Which fails to ping

Where as us works

ping db.us.clamav.net

Pinging db.us.clamav.net.cdn.cloudflare.net [104.16.187.138] with 32 bytes
of data:

Reply from 104.16.187.138: bytes=32 time=22ms TTL=60
Reply from 104.16.187.138: bytes=32 time=25ms TTL=60

uk workds

ping db.uk.clamav.net

Pinging db.uk.clamav.net.cdn.cloudflare.net [104.16.188.138] with 32 bytes
of data:

Reply from 104.16.188.138: bytes=32 time=29ms TTL=60


So, db.gb.clamav.net needs fixing


--
NetPilot Support
Tel: 01173 357335
Web: http://www.netpilot.com/netpilot/support/

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-27 Thread Steve Basford

On Wed, June 27, 2018 2:42 am, Joel Esler (jesler) wrote:
> Db.us should be good on both now.
>

> Worked perfectly from California, but with .cdiff updates, not the entire

Just checked and gb doesn't work

ClamAV update process started at Wed Jun 27 09:37:20 2018
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: clamav-0.99.4 Recommended version: 0.100.0
DON'T PANIC! Read http://www.clamav.net/documents/upgrading-clamav
main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, builder:
sigmgr
)
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: getpatch: Can't download daily-24686.cdiff from db.gb.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
WARNING: Can't get information about db.gb.clamav.net: Unknown error
WARNING: Can't download daily.cvd from db.gb.clamav.net

I then checked...

ping db.gb.clamav.net

Which fails to ping

Where as us works

ping db.us.clamav.net

Pinging db.us.clamav.net.cdn.cloudflare.net [104.16.187.138] with 32 bytes
of data:

Reply from 104.16.187.138: bytes=32 time=22ms TTL=60
Reply from 104.16.187.138: bytes=32 time=25ms TTL=60

uk workds

ping db.uk.clamav.net

Pinging db.uk.clamav.net.cdn.cloudflare.net [104.16.188.138] with 32 bytes
of data:

Reply from 104.16.188.138: bytes=32 time=29ms TTL=60

So, db.gb.clamav.net needs fixing
-- 
Cheers,

Steve
Twitter: @sanesecurity

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Joel Esler (jesler)

Db.us should be good on both now.

Sent from my iPhone

On Jun 26, 2018, at 21:15, Al Varnell 
mailto:alvarn...@mac.com>> wrote:

Worked perfectly from California, but with .cdiff updates, not the entire .cvd.

Let me know if I need to check the .cvd.

-Al-

On Tue, Jun 26, 2018 at 05:40 PM, Joel Esler (jesler) wrote:
I just purged db.us’s cache.  Can you try?

Sent from my iPhone

On Jun 26, 2018, at 20:24, Paul Kosinski 
mailto:clamav-us...@iment.com>> wrote:

Joel,

Sorry to have been somewhat cryptic: I assumed the context of the
posting I was nominally replying to.

By "broken", I meant that freshclam cannot retrieve daily.cvd files
from the new CloudFlare IPs. In fact, I just now removed mirrors.dat,
and all(?) the new CloudFlare IPs report "not synchronized", probably
due to the ping.clamav.net failures (see below):

WARNING: Mirror 104.16.185.138 is not synchronized.
WARNING: Mirror 104.16.186.138 is not synchronized.
WARNING: Mirror 104.16.187.138 is not synchronized.
WARNING: Mirror 104.16.188.138 is not synchronized.
WARNING: Mirror 104.16.189.138 is not synchronized.

The command "host -t txt current.cvd.clamav.net" 
reports as follows:

current.cvd.clamav.net descriptive text 
"0.100.0:58:24699:1530048540:1:63:47550:322"

But the freshclam log reports some variant of:

Querying daily.0.85.0.0.6810BD8A.ping.clamav.net
Can't query daily.0.85.0.0.6810BD8A.ping.clamav.net
Giving up on db.us.clamav.net...

None of my local recursive DNS, my off-site Web server (in another
state), or (apparently) 8.8.8.8 or 8.8.4.4 can resolve
daily.0.85.0.0.6810BD8A.ping.clamav.net, but 
mxtoolbox.com resolves it,
(via ns4.clamav.net) to:

5.9.14.57 at Hetzner Online AG (AS24940)

Weird.

However, it seems I *can* get at the daily.cvd file by means of direct HTTP
access to "http://db.us.clamav.net/daily.cvd;, which accesses the same
CloudFlare IPs that are allegedly "not synchronized".

The result of all this confusion is that the last time I got a
daily.cvd via freshclam was before CloudFlare:

Monday 25 June 2018 at 09:06:26
Database updated (6556585 signatures) from 
db.us.clamav.net (IP: 200.236.31.1)

I am going to have to use the direct HTTP until [whenever]?




On Tue, 26 Jun 2018 20:01:09 +
"Joel Esler (jesler)" mailto:jes...@cisco.com>> wrote:

Define broken in your context?  Doesn't have the file?  (Humor me, so
I understand from your parlance)



On Jun 26, 2018, at 2:59 PM, Paul Kosinski 
mailto:clamav-us...@iment.com>>
wrote:

ALL of the db.xx.clamav.net (plus 
database.clamav.net) apparently
point to CloudFlare, and they are ALL broken. (And have been for
many hours.)


On Tue, 26 Jun 2018 11:09:08 -0700
Dave Warren mailto:d...@thedave.ca>> wrote:

As that is a Cloudflare IP, I believe it possibly could represent
one or more backend mirrors as it may return different content
depending on the hostname provided.

On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
Joel,

I'm now getting "WARNING: Mirror 104.16.188.138 is not
synchronized." when using the CDN. Could it be related to the
changes made to fix this as my definitions are 3 revisions out?>
Thanks,

On 25 June 2018 at 04:28, Joel Esler (jesler)
mailto:jes...@cisco.com>> wrote:>> Al,


Thanks. We are aware.  Looking into it.

Sent from my iPhone


On Jun 24, 2018, at 23:12, Al Varnell 
mailto:alvarn...@mac.com>> wrote:

Yes, but all but one was empty.

Sent from my iPad

-Al-

On Jun 24, 2018, at 19:42, Paul Kosinski
mailto:clamav-us...@iment.com>> wrote:>>  >>
I've gotten several daily.cvd updates in that period. They came
from>>  >> several IP addresses associated with
from>>  >> http://db.us.clamav.net/.


On Sun, 24 Jun 2018 18:08:59 -0700
Al Varnell mailto:alvarn...@mac.com>> wrote:

Just wanted to point out that there has only been one
signature
added>>  >>> to the VirusDB by daily updates in the last 32
added>>  >>> hours.


-Al-

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

-Al-
--
Al Varnell
Mountain View, CA




___
clamav-users mailing list

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Al Varnell

Worked perfectly from California, but with .cdiff updates, not the entire .cvd.

Let me know if I need to check the .cvd.

-Al-

On Tue, Jun 26, 2018 at 05:40 PM, Joel Esler (jesler) wrote:
> I just purged db.us ’s cache.  Can you try?
> 
> Sent from my iPhone
> 
>> On Jun 26, 2018, at 20:24, Paul Kosinski > > wrote:
>> 
>> Joel,
>> 
>> Sorry to have been somewhat cryptic: I assumed the context of the
>> posting I was nominally replying to.
>> 
>> By "broken", I meant that freshclam cannot retrieve daily.cvd files
>> from the new CloudFlare IPs. In fact, I just now removed mirrors.dat,
>> and all(?) the new CloudFlare IPs report "not synchronized", probably
>> due to the ping.clamav.net  failures (see below):
>> 
>> WARNING: Mirror 104.16.185.138 is not synchronized.
>> WARNING: Mirror 104.16.186.138 is not synchronized.
>> WARNING: Mirror 104.16.187.138 is not synchronized.
>> WARNING: Mirror 104.16.188.138 is not synchronized.
>> WARNING: Mirror 104.16.189.138 is not synchronized.
>> 
>> The command "host -t txt current.cvd.clamav.net 
>> " reports as follows:
>> 
>> current.cvd.clamav.net  descriptive text 
>> "0.100.0:58:24699:1530048540:1:63:47550:322"
>> 
>> But the freshclam log reports some variant of:
>> 
>> Querying daily.0.85.0.0.6810BD8A.ping.clamav.net
>> Can't query daily.0.85.0.0.6810BD8A.ping.clamav.net
>> Giving up on db.us.clamav.net ...
>> 
>> None of my local recursive DNS, my off-site Web server (in another
>> state), or (apparently) 8.8.8.8 or 8.8.4.4 can resolve
>> daily.0.85.0.0.6810BD8A.ping.clamav.net, but mxtoolbox.com 
>>  resolves it,
>> (via ns4.clamav.net ) to:
>> 
>> 5.9.14.57 at Hetzner Online AG (AS24940)
>> 
>> Weird.
>> 
>> However, it seems I *can* get at the daily.cvd file by means of direct HTTP
>> access to "http://db.us.clamav.net/daily.cvd 
>> ", which accesses the same
>> CloudFlare IPs that are allegedly "not synchronized".
>> 
>> The result of all this confusion is that the last time I got a
>> daily.cvd via freshclam was before CloudFlare:
>> 
>> Monday 25 June 2018 at 09:06:26
>> Database updated (6556585 signatures) from db.us.clamav.net 
>>  (IP: 200.236.31.1)
>> 
>> I am going to have to use the direct HTTP until [whenever]?
>> 
>> 
>> 
>> 
>> On Tue, 26 Jun 2018 20:01:09 +
>> "Joel Esler (jesler)" mailto:jes...@cisco.com>> wrote:
>> 
>>> Define broken in your context?  Doesn't have the file?  (Humor me, so
>>> I understand from your parlance)
>>> 
>>> 
>>> 
 On Jun 26, 2018, at 2:59 PM, Paul Kosinski >>> >
 wrote:
 
 ALL of the db.xx.clamav.net  (plus 
 database.clamav.net ) apparently
 point to CloudFlare, and they are ALL broken. (And have been for
 many hours.)
 
 
 On Tue, 26 Jun 2018 11:09:08 -0700
 Dave Warren mailto:d...@thedave.ca>> wrote:
 
> As that is a Cloudflare IP, I believe it possibly could represent
> one or more backend mirrors as it may return different content
> depending on the hostname provided.
> 
>> On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
>> Joel, 
>> 
>> I'm now getting "WARNING: Mirror 104.16.188.138 is not
>> synchronized." when using the CDN. Could it be related to the
>> changes made to fix this as my definitions are 3 revisions out?> 
>> Thanks, 
>> 
>> On 25 June 2018 at 04:28, Joel Esler (jesler)
>> mailto:jes...@cisco.com>> wrote:>> Al,
>>> 
>>> 
>>> Thanks. We are aware.  Looking into it.  
>>> 
>>> Sent from my iPhone
>>> 
>>> 
 On Jun 24, 2018, at 23:12, Al Varnell >>> > wrote:
 
 Yes, but all but one was empty.
 
 Sent from my iPad
 
 -Al-
 
> On Jun 24, 2018, at 19:42, Paul Kosinski
> mailto:clamav-us...@iment.com>> wrote:>>  >> 
> I've gotten several daily.cvd updates in that period. They came
> from>>  >> several IP addresses associated with
> from>>  >> http://db.us.clamav.net/ .
> 
> 
> On Sun, 24 Jun 2018 18:08:59 -0700
> Al Varnell mailto:alvarn...@mac.com>> wrote:
> 
>> Just wanted to point out that there has only been one
>> signature
>> added>>  >>> to the VirusDB by daily updates in the last 32
>> added>>  >>> hours.
>> 
>> 
>> -Al-
>> 
>> ___
>> clamav-users mailing list
>> clamav-users@lists.clamav.net 
>>

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Paul Kosinski

My freshclam run a few minutes after my detailed mail worked, and
pulled in a lot of new signatures.

Don't know if the db.us cache purging was the magic or not -- my
earlier tests with db.ca, db.jp etc. all failed -- but now it works.

Great!


On Wed, 27 Jun 2018 00:40:10 +
"Joel Esler (jesler)"  wrote:

> I just purged db.us’s cache.  Can you try?
> 
> Sent from my iPhone
> 
> > On Jun 26, 2018, at 20:24, Paul Kosinski 
> > wrote:
> > 
> > Joel,
> > 
> > Sorry to have been somewhat cryptic: I assumed the context of the
> > posting I was nominally replying to.
> > 
> > By "broken", I meant that freshclam cannot retrieve daily.cvd files
> > from the new CloudFlare IPs. In fact, I just now removed
> > mirrors.dat, and all(?) the new CloudFlare IPs report "not
> > synchronized", probably due to the ping.clamav.net failures (see
> > below):
> > 
> >  WARNING: Mirror 104.16.185.138 is not synchronized.
> >  WARNING: Mirror 104.16.186.138 is not synchronized.
> >  WARNING: Mirror 104.16.187.138 is not synchronized.
> >  WARNING: Mirror 104.16.188.138 is not synchronized.
> >  WARNING: Mirror 104.16.189.138 is not synchronized.
> > 
> > The command "host -t txt current.cvd.clamav.net" reports as follows:
> > 
> >  current.cvd.clamav.net descriptive text
> > "0.100.0:58:24699:1530048540:1:63:47550:322"
> > 
> > But the freshclam log reports some variant of:
> > 
> >  Querying daily.0.85.0.0.6810BD8A.ping.clamav.net
> >  Can't query daily.0.85.0.0.6810BD8A.ping.clamav.net
> >  Giving up on db.us.clamav.net...
> > 
> > None of my local recursive DNS, my off-site Web server (in another
> > state), or (apparently) 8.8.8.8 or 8.8.4.4 can resolve
> > daily.0.85.0.0.6810BD8A.ping.clamav.net, but mxtoolbox.com resolves
> > it, (via ns4.clamav.net) to:
> > 
> >  5.9.14.57 at Hetzner Online AG (AS24940)
> > 
> > Weird.
> > 
> > However, it seems I *can* get at the daily.cvd file by means of
> > direct HTTP access to "http://db.us.clamav.net/daily.cvd;, which
> > accesses the same CloudFlare IPs that are allegedly "not
> > synchronized".
> > 
> > The result of all this confusion is that the last time I got a
> > daily.cvd via freshclam was before CloudFlare:
> > 
> >  Monday 25 June 2018 at 09:06:26
> >  Database updated (6556585 signatures) from db.us.clamav.net (IP:
> > 200.236.31.1)
> > 
> > I am going to have to use the direct HTTP until [whenever]?
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Joel Esler (jesler)

I just purged db.us’s cache.  Can you try?

Sent from my iPhone

> On Jun 26, 2018, at 20:24, Paul Kosinski  wrote:
> 
> Joel,
> 
> Sorry to have been somewhat cryptic: I assumed the context of the
> posting I was nominally replying to.
> 
> By "broken", I meant that freshclam cannot retrieve daily.cvd files
> from the new CloudFlare IPs. In fact, I just now removed mirrors.dat,
> and all(?) the new CloudFlare IPs report "not synchronized", probably
> due to the ping.clamav.net failures (see below):
> 
>  WARNING: Mirror 104.16.185.138 is not synchronized.
>  WARNING: Mirror 104.16.186.138 is not synchronized.
>  WARNING: Mirror 104.16.187.138 is not synchronized.
>  WARNING: Mirror 104.16.188.138 is not synchronized.
>  WARNING: Mirror 104.16.189.138 is not synchronized.
> 
> The command "host -t txt current.cvd.clamav.net" reports as follows:
> 
>  current.cvd.clamav.net descriptive text 
> "0.100.0:58:24699:1530048540:1:63:47550:322"
> 
> But the freshclam log reports some variant of:
> 
>  Querying daily.0.85.0.0.6810BD8A.ping.clamav.net
>  Can't query daily.0.85.0.0.6810BD8A.ping.clamav.net
>  Giving up on db.us.clamav.net...
> 
> None of my local recursive DNS, my off-site Web server (in another
> state), or (apparently) 8.8.8.8 or 8.8.4.4 can resolve
> daily.0.85.0.0.6810BD8A.ping.clamav.net, but mxtoolbox.com resolves it,
> (via ns4.clamav.net) to:
> 
>  5.9.14.57 at Hetzner Online AG (AS24940)
> 
> Weird.
> 
> However, it seems I *can* get at the daily.cvd file by means of direct HTTP
> access to "http://db.us.clamav.net/daily.cvd;, which accesses the same
> CloudFlare IPs that are allegedly "not synchronized".
> 
> The result of all this confusion is that the last time I got a
> daily.cvd via freshclam was before CloudFlare:
> 
>  Monday 25 June 2018 at 09:06:26
>  Database updated (6556585 signatures) from db.us.clamav.net (IP: 
> 200.236.31.1)
> 
> I am going to have to use the direct HTTP until [whenever]?
> 
> 
> 
> 
> On Tue, 26 Jun 2018 20:01:09 +
> "Joel Esler (jesler)"  wrote:
> 
>> Define broken in your context?  Doesn't have the file?  (Humor me, so
>> I understand from your parlance)
>> 
>> 
>> 
>>> On Jun 26, 2018, at 2:59 PM, Paul Kosinski 
>>> wrote:
>>> 
>>> ALL of the db.xx.clamav.net (plus database.clamav.net) apparently
>>> point to CloudFlare, and they are ALL broken. (And have been for
>>> many hours.)
>>> 
>>> 
>>> On Tue, 26 Jun 2018 11:09:08 -0700
>>> Dave Warren  wrote:
>>> 
 As that is a Cloudflare IP, I believe it possibly could represent
 one or more backend mirrors as it may return different content
 depending on the hostname provided.
 
> On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
> Joel, 
> 
> I'm now getting "WARNING: Mirror 104.16.188.138 is not
> synchronized." when using the CDN. Could it be related to the
> changes made to fix this as my definitions are 3 revisions out?> 
> Thanks, 
> 
> On 25 June 2018 at 04:28, Joel Esler (jesler)
>  wrote:>> Al,
>> 
>> 
>> Thanks. We are aware.  Looking into it.  
>> 
>> Sent from my iPhone
>> 
>> 
>>> On Jun 24, 2018, at 23:12, Al Varnell  wrote:
>>> 
>>> Yes, but all but one was empty.
>>> 
>>> Sent from my iPad
>>> 
>>> -Al-
>>> 
 On Jun 24, 2018, at 19:42, Paul Kosinski
  wrote:>>  >> 
 I've gotten several daily.cvd updates in that period. They came
 from>>  >> several IP addresses associated with
 from>>  >> http://db.us.clamav.net/.
 
 
 On Sun, 24 Jun 2018 18:08:59 -0700
 Al Varnell  wrote:
 
> Just wanted to point out that there has only been one
> signature
> added>>  >>> to the VirusDB by daily updates in the last 32
> added>>  >>> hours.
> 
> 
> -Al-
> 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Paul Kosinski

Joel,

Sorry to have been somewhat cryptic: I assumed the context of the
posting I was nominally replying to.

By "broken", I meant that freshclam cannot retrieve daily.cvd files
from the new CloudFlare IPs. In fact, I just now removed mirrors.dat,
and all(?) the new CloudFlare IPs report "not synchronized", probably
due to the ping.clamav.net failures (see below):

  WARNING: Mirror 104.16.185.138 is not synchronized.
  WARNING: Mirror 104.16.186.138 is not synchronized.
  WARNING: Mirror 104.16.187.138 is not synchronized.
  WARNING: Mirror 104.16.188.138 is not synchronized.
  WARNING: Mirror 104.16.189.138 is not synchronized.

The command "host -t txt current.cvd.clamav.net" reports as follows:

  current.cvd.clamav.net descriptive text 
"0.100.0:58:24699:1530048540:1:63:47550:322"

But the freshclam log reports some variant of:

  Querying daily.0.85.0.0.6810BD8A.ping.clamav.net
  Can't query daily.0.85.0.0.6810BD8A.ping.clamav.net
  Giving up on db.us.clamav.net...

None of my local recursive DNS, my off-site Web server (in another
state), or (apparently) 8.8.8.8 or 8.8.4.4 can resolve
daily.0.85.0.0.6810BD8A.ping.clamav.net, but mxtoolbox.com resolves it,
(via ns4.clamav.net) to:

  5.9.14.57 at Hetzner Online AG (AS24940)

Weird.

However, it seems I *can* get at the daily.cvd file by means of direct HTTP
access to "http://db.us.clamav.net/daily.cvd;, which accesses the same
CloudFlare IPs that are allegedly "not synchronized".

The result of all this confusion is that the last time I got a
daily.cvd via freshclam was before CloudFlare:

  Monday 25 June 2018 at 09:06:26
  Database updated (6556585 signatures) from db.us.clamav.net (IP: 200.236.31.1)

I am going to have to use the direct HTTP until [whenever]?

On Tue, 26 Jun 2018 20:01:09 +
"Joel Esler (jesler)"  wrote:

> Define broken in your context?  Doesn't have the file?  (Humor me, so
> I understand from your parlance)
> 
> 
> 
> > On Jun 26, 2018, at 2:59 PM, Paul Kosinski 
> > wrote:
> > 
> > ALL of the db.xx.clamav.net (plus database.clamav.net) apparently
> > point to CloudFlare, and they are ALL broken. (And have been for
> > many hours.)
> > 
> > 
> > On Tue, 26 Jun 2018 11:09:08 -0700
> > Dave Warren  wrote:
> > 
> >> As that is a Cloudflare IP, I believe it possibly could represent
> >> one or more backend mirrors as it may return different content
> >> depending on the hostname provided.
> >> 
> >> On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
> >>> Joel, 
> >>> 
> >>> I'm now getting "WARNING: Mirror 104.16.188.138 is not
> >>> synchronized." when using the CDN. Could it be related to the
> >>> changes made to fix this as my definitions are 3 revisions out?> 
> >>> Thanks, 
> >>> 
> >>> On 25 June 2018 at 04:28, Joel Esler (jesler)
> >>>  wrote:>> Al,
>  
>  
>  Thanks. We are aware.  Looking into it.  
>  
>  Sent from my iPhone
>  
>  
> > On Jun 24, 2018, at 23:12, Al Varnell  wrote:
> > 
> > Yes, but all but one was empty.
> > 
> > Sent from my iPad
> > 
> > -Al-
> > 
> >> On Jun 24, 2018, at 19:42, Paul Kosinski
> >>  wrote:>>  >> 
> >> I've gotten several daily.cvd updates in that period. They came
> >> from>>  >> several IP addresses associated with
> >> from>>  >> http://db.us.clamav.net/.
> >> 
> >> 
> >> On Sun, 24 Jun 2018 18:08:59 -0700
> >> Al Varnell  wrote:
> >> 
> >>> Just wanted to point out that there has only been one
> >>> signature
> >>> added>>  >>> to the VirusDB by daily updates in the last 32
> >>> added>>  >>> hours.
> >>> 
> >>> 
> >>> -Al-

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Joel Esler (jesler)

Define broken in your context?  Doesn't have the file?  (Humor me, so I 
understand from your parlance)



> On Jun 26, 2018, at 2:59 PM, Paul Kosinski  wrote:
> 
> ALL of the db.xx.clamav.net (plus database.clamav.net) apparently point
> to CloudFlare, and they are ALL broken. (And have been for many hours.)
> 
> 
> On Tue, 26 Jun 2018 11:09:08 -0700
> Dave Warren  wrote:
> 
>> As that is a Cloudflare IP, I believe it possibly could represent one
>> or more backend mirrors as it may return different content depending
>> on the hostname provided.
>> 
>> On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
>>> Joel, 
>>> 
>>> I'm now getting "WARNING: Mirror 104.16.188.138 is not
>>> synchronized." when using the CDN. Could it be related to the
>>> changes made to fix this as my definitions are 3 revisions out?> 
>>> Thanks, 
>>> 
>>> On 25 June 2018 at 04:28, Joel Esler (jesler)
>>>  wrote:>> Al,
 
 
 Thanks. We are aware.  Looking into it.  
 
 Sent from my iPhone
 
 
> On Jun 24, 2018, at 23:12, Al Varnell  wrote:
> 
> Yes, but all but one was empty.
> 
> Sent from my iPad
> 
> -Al-
> 
>> On Jun 24, 2018, at 19:42, Paul Kosinski
>>  wrote:>>  >> 
>> I've gotten several daily.cvd updates in that period. They came
>> from>>  >> several IP addresses associated with
>> from>>  >> http://db.us.clamav.net/.
>> 
>> 
>> On Sun, 24 Jun 2018 18:08:59 -0700
>> Al Varnell  wrote:
>> 
>>> Just wanted to point out that there has only been one
>>> signature
>>> added>>  >>> to the VirusDB by daily updates in the last 32
>>> added>>  >>> hours.
>>> 
>>> 
>>> -Al-
> 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Paul Kosinski

ALL of the db.xx.clamav.net (plus database.clamav.net) apparently point
to CloudFlare, and they are ALL broken. (And have been for many hours.)


On Tue, 26 Jun 2018 11:09:08 -0700
Dave Warren  wrote:

> As that is a Cloudflare IP, I believe it possibly could represent one
> or more backend mirrors as it may return different content depending
> on the hostname provided.
> 
> On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
> > Joel, 
> > 
> > I'm now getting "WARNING: Mirror 104.16.188.138 is not
> > synchronized." when using the CDN. Could it be related to the
> > changes made to fix this as my definitions are 3 revisions out?> 
> > Thanks, 
> > 
> > On 25 June 2018 at 04:28, Joel Esler (jesler)
> >  wrote:>> Al,
> >> 
> >> 
> >>  Thanks. We are aware.  Looking into it.  
> >> 
> >>  Sent from my iPhone
> >> 
> >> 
> >> > On Jun 24, 2018, at 23:12, Al Varnell  wrote:
> >>  > 
> >>  > Yes, but all but one was empty.
> >>  > 
> >>  > Sent from my iPad
> >>  > 
> >>  > -Al-
> >>  > 
> >>  >> On Jun 24, 2018, at 19:42, Paul Kosinski
> >>  >>  wrote:>>  >> 
> >>  >> I've gotten several daily.cvd updates in that period. They came
> >>  >> from>>  >> several IP addresses associated with
> >>  >> from>>  >> http://db.us.clamav.net/.
> >>  >> 
> >>  >> 
> >>  >> On Sun, 24 Jun 2018 18:08:59 -0700
> >>  >> Al Varnell  wrote:
> >>  >> 
> >>  >>> Just wanted to point out that there has only been one
> >>  >>> signature
> >>  >>> added>>  >>> to the VirusDB by daily updates in the last 32
> >>  >>> added>>  >>> hours.
> >>  >>> 
> >>  >>> 
> >>  >>> -Al-

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Dave Warren

As that is a Cloudflare IP, I believe it possibly could represent one or
more backend mirrors as it may return different content depending on the
hostname provided.

On Tue, Jun 26, 2018, at 06:41, Robin Bourne wrote:
> Joel, 
> 
> I'm now getting "WARNING: Mirror 104.16.188.138 is not synchronized."
> when using the CDN. Could it be related to the changes made to fix
> this as my definitions are 3 revisions out?> 
> Thanks, 
> 
> On 25 June 2018 at 04:28, Joel Esler (jesler)
>  wrote:>> Al,
>> 
>> 
>>  Thanks. We are aware.  Looking into it.  
>> 
>>  Sent from my iPhone
>> 
>> 
>> > On Jun 24, 2018, at 23:12, Al Varnell  wrote:
>>  > 
>>  > Yes, but all but one was empty.
>>  > 
>>  > Sent from my iPad
>>  > 
>>  > -Al-
>>  > 
>>  >> On Jun 24, 2018, at 19:42, Paul Kosinski 
>>  >> wrote:>>  >> 
>>  >> I've gotten several daily.cvd updates in that period. They came
>>  >> from>>  >> several IP addresses associated with http://db.us.clamav.net/.
>>  >> 
>>  >> 
>>  >> On Sun, 24 Jun 2018 18:08:59 -0700
>>  >> Al Varnell  wrote:
>>  >> 
>>  >>> Just wanted to point out that there has only been one signature
>>  >>> added>>  >>> to the VirusDB by daily updates in the last 32 hours.
>>  >>> 
>>  >>> 
>>  >>> -Al-
>>  >> ___
>>  >> clamav-users mailing list
>>  >> clamav-users@lists.clamav.net
>>  >> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>  >> 
>>  >> 
>>  >> Help us build a comprehensive ClamAV guide:
>>  >> https://github.com/vrtadmin/clamav-faq
>>  >> 
>>  >> http://www.clamav.net/contact.html#ml
>>  > ___
>>  > clamav-users mailing list
>>  > clamav-users@lists.clamav.net
>>  > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>  > 
>>  > 
>>  > Help us build a comprehensive ClamAV guide:
>>  > https://github.com/vrtadmin/clamav-faq
>>  > 
>>  > http://www.clamav.net/contact.html#ml
>>  ___
>>  clamav-users mailing list
>> clamav-users@lists.clamav.net
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>> 
>> 
>>  Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> _
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>  
>  
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>  
> http://www.clamav.net/contact.html#ml

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Michael Da Cova

I get mirror issue with 104.16.188.138 often

From: clamav-users  On Behalf Of Robin 
Bourne
Sent: 26 June 2018 14:42
To: ClamAV users ML 
Subject: Re: [clamav-users] VirusDB Updates Broken?

Joel,

I'm now getting "WARNING: Mirror 104.16.188.138 is not synchronized." when 
using the CDN. Could it be related to the changes made to fix this as my 
definitions are 3 revisions out?

Thanks,

On 25 June 2018 at 04:28, Joel Esler (jesler) 
mailto:jes...@cisco.com>> wrote:
Al,


Thanks. We are aware.  Looking into it.

Sent from my iPhone

> On Jun 24, 2018, at 23:12, Al Varnell 
> mailto:alvarn...@mac.com>> wrote:
>
> Yes, but all but one was empty.
>
> Sent from my iPad
>
> -Al-
>
>> On Jun 24, 2018, at 19:42, Paul Kosinski 
>> mailto:clamav-us...@iment.com>> wrote:
>>
>> I've gotten several daily.cvd updates in that period. They came from
>> several IP addresses associated with http://db.us.clamav.net/.
>>
>>
>> On Sun, 24 Jun 2018 18:08:59 -0700
>> Al Varnell mailto:alvarn...@mac.com>> wrote:
>>
>>> Just wanted to point out that there has only been one signature added
>>> to the VirusDB by daily updates in the last 32 hours.
>>>
>>>
>>> -Al-
>> ___
>> clamav-users mailing list
>> clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-26 Thread Robin Bourne

Joel,

I'm now getting "WARNING: Mirror 104.16.188.138 is not synchronized." when
using the CDN. Could it be related to the changes made to fix this as my
definitions are 3 revisions out?

Thanks,

On 25 June 2018 at 04:28, Joel Esler (jesler)  wrote:

> Al,
>
>
> Thanks. We are aware.  Looking into it.
>
> Sent from my iPhone
>
> > On Jun 24, 2018, at 23:12, Al Varnell  wrote:
> >
> > Yes, but all but one was empty.
> >
> > Sent from my iPad
> >
> > -Al-
> >
> >> On Jun 24, 2018, at 19:42, Paul Kosinski 
> wrote:
> >>
> >> I've gotten several daily.cvd updates in that period. They came from
> >> several IP addresses associated with http://db.us.clamav.net/.
> >>
> >>
> >> On Sun, 24 Jun 2018 18:08:59 -0700
> >> Al Varnell  wrote:
> >>
> >>> Just wanted to point out that there has only been one signature added
> >>> to the VirusDB by daily updates in the last 32 hours.
> >>>
> >>>
> >>> -Al-
> >> ___
> >> clamav-users mailing list
> >> clamav-users@lists.clamav.net
> >> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >>
> >>
> >> Help us build a comprehensive ClamAV guide:
> >> https://github.com/vrtadmin/clamav-faq
> >>
> >> http://www.clamav.net/contact.html#ml
> > ___
> > clamav-users mailing list
> > clamav-users@lists.clamav.net
> > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >
> >
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-24 Thread Joel Esler (jesler)

Al,


Thanks. We are aware.  Looking into it.  

Sent from my iPhone

> On Jun 24, 2018, at 23:12, Al Varnell  wrote:
> 
> Yes, but all but one was empty.
> 
> Sent from my iPad
> 
> -Al-
> 
>> On Jun 24, 2018, at 19:42, Paul Kosinski  wrote:
>> 
>> I've gotten several daily.cvd updates in that period. They came from
>> several IP addresses associated with http://db.us.clamav.net/.
>> 
>> 
>> On Sun, 24 Jun 2018 18:08:59 -0700
>> Al Varnell  wrote:
>> 
>>> Just wanted to point out that there has only been one signature added
>>> to the VirusDB by daily updates in the last 32 hours.
>>> 
>>> 
>>> -Al-
>> ___
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>> 
>> 
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-24 Thread Al Varnell

Yes, but all but one was empty.

Sent from my iPad

-Al-

> On Jun 24, 2018, at 19:42, Paul Kosinski  wrote:
> 
> I've gotten several daily.cvd updates in that period. They came from
> several IP addresses associated with http://db.us.clamav.net/.
> 
> 
> On Sun, 24 Jun 2018 18:08:59 -0700
> Al Varnell  wrote:
> 
>> Just wanted to point out that there has only been one signature added
>> to the VirusDB by daily updates in the last 32 hours.
>> 
>> 
>> -Al-
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

2018-06-24 Thread Paul Kosinski

I've gotten several daily.cvd updates in that period. They came from
several IP addresses associated with http://db.us.clamav.net/.


On Sun, 24 Jun 2018 18:08:59 -0700
Al Varnell  wrote:

> Just wanted to point out that there has only been one signature added
> to the VirusDB by daily updates in the last 32 hours.
> 
> 
> -Al-
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] VirusDB Updates Broken?

2018-06-24 Thread Al Varnell

Just wanted to point out that there has only been one signature added to the 
VirusDB by daily updates in the last 32 hours.


-Al-
-- 
Al Varnell
Mountain View, CA






smime.p7s
Description: S/MIME cryptographic signature
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

Re: [clamav-users] VirusDB Updates Broken?

[clamav-users] VirusDB Updates Broken?

23 matches

Site Navigation

Mail list logo

Footer information