Bonjour,

il y a quelque temps j'ai posté un mail signalant un problème avec clamav. Je remercie au passage la personne ayant pris la peine de répondre. Etant pris par d'autres priorités je n'ai pas donné suite.

Hier, j'ai eu l'heureuse surprise de voir qu'une mise à jour de clamav était disponible pour ubuntu. Je l'ai installé croyant en avoir enfin fini avec les messages d'erreur. Malheureusement non.

J'ai relancé clamav ce matin et voici les messages d'erreur que je retrouve dans /var/log/clamav/freshclam.log

ClamAV update process started at Tue Sep 25 10:28:21 2007
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.90.2 Recommended version: 0.91.2
DON'T PANIC! Read http://www.clamav.net/support/faq
main.inc is up to date (version: 44, sigs: 133163, f-level: 20, builder: sven)
Ignoring mirror 91.194.14.100 (due to previous errors)
Ignoring mirror 193.52.101.131 (too often connections with outdated version)
Ignoring mirror 193.218.105.9 (too often connections with outdated version)
Ignoring mirror 194.116.142.73 (too often connections with outdated version)
Ignoring mirror 195.214.240.53 (too often connections with outdated version)
Ignoring mirror 212.180.1.29 (too often connections with outdated version)
ERROR: getpatch: Can't download daily-4384.cdiff from database.clamav.net
Ignoring mirror 212.180.1.29 (too often connections with outdated version)
Ignoring mirror 91.194.14.100 (due to previous errors)
Ignoring mirror 193.52.101.131 (too often connections with outdated version)
Ignoring mirror 193.218.105.9 (too often connections with outdated version)
Ignoring mirror 194.116.142.73 (too often connections with outdated version)
Ignoring mirror 195.214.240.53 (too often connections with outdated version)
ERROR: getpatch: Can't download daily-4384.cdiff from database.clamav.net
Ignoring mirror 195.214.240.53 (too often connections with outdated version)
Ignoring mirror 212.180.1.29 (too often connections with outdated version)
Ignoring mirror 91.194.14.100 (due to previous errors)
Ignoring mirror 193.52.101.131 (too often connections with outdated version)
Ignoring mirror 193.218.105.9 (too often connections with outdated version)
Ignoring mirror 194.116.142.73 (too often connections with outdated version)
ERROR: getpatch: Can't download daily-4384.cdiff from database.clamav.net
Ignoring mirror 194.116.142.73 (too often connections with outdated version)
Ignoring mirror 195.214.240.53 (too often connections with outdated version)
Ignoring mirror 212.180.1.29 (too often connections with outdated version)
Ignoring mirror 91.194.14.100 (due to previous errors)
Ignoring mirror 193.52.101.131 (too often connections with outdated version)
Ignoring mirror 193.218.105.9 (too often connections with outdated version)
ERROR: getpatch: Can't download daily-4384.cdiff from database.clamav.net
Ignoring mirror 193.218.105.9 (too often connections with outdated version)
Ignoring mirror 194.116.142.73 (too often connections with outdated version)
Ignoring mirror 195.214.240.53 (too often connections with outdated version)
Ignoring mirror 212.180.1.29 (too often connections with outdated version)
Ignoring mirror 91.194.14.100 (due to previous errors)
Ignoring mirror 193.52.101.131 (too often connections with outdated version)
Ignoring mirror 193.218.105.9 (too often connections with outdated version)
ERROR: getpatch: Can't download daily-4384.cdiff from database.clamav.net
Ignoring mirror 193.218.105.9 (too often connections with outdated version)
Ignoring mirror 194.116.142.73 (too often connections with outdated version)
Ignoring mirror 195.214.240.53 (too often connections with outdated version)
Ignoring mirror 212.180.1.29 (too often connections with outdated version)
Ignoring mirror 91.194.14.100 (due to previous errors)
Ignoring mirror 193.52.101.131 (too often connections with outdated version)
ERROR: getpatch: Can't download daily-4384.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Ignoring mirror 193.52.101.131 (too often connections with outdated version)
Ignoring mirror 193.218.105.9 (too often connections with outdated version)
Ignoring mirror 194.116.142.73 (too often connections with outdated version)
Ignoring mirror 195.214.240.53 (too often connections with outdated version)
Ignoring mirror 212.180.1.29 (too often connections with outdated version)
Ignoring mirror 91.194.14.100 (due to previous errors)
ERROR: Can't download daily.cvd from database.clamav.net
Giving up on database.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in freshclam.conf is working. Check http://www.clamav.net/support/mirror-problem for possible reasons.
--------------------------------------

La mise à jour pour ubuntu est apparemment encore toujours en retard de version et cela semble bloquer la mise à jour de sécurité.

Dans le fichier clamav.log je suis aussi surpris de trouver très fréquemment une séquence comme celle-ci
Tue Sep 25 02:14:11 2007 -> Reading databases from /var/lib/clamav
Tue Sep 25 02:20:07 2007 -> Database correctly reloaded (260532 signatures)
Tue Sep 25 03:28:42 2007 -> SelfCheck: Database modification detected. Forcing reload.
Tue Sep 25 03:28:42 2007 -> Reading databases from /var/lib/clamav
Tue Sep 25 03:34:22 2007 -> Database correctly reloaded (260532 signatures)
Tue Sep 25 05:07:55 2007 -> SelfCheck: Database modification detected. Forcing reload.
Tue Sep 25 05:07:55 2007 -> Reading databases from /var/lib/clamav
Tue Sep 25 05:13:35 2007 -> Database correctly reloaded (260532 signatures)
Tue Sep 25 06:45:27 2007 -> SelfCheck: Database modification detected. Forcing reload.
Tue Sep 25 06:45:27 2007 -> Reading databases from /var/lib/clamav
Tue Sep 25 06:51:31 2007 -> Database correctly reloaded (260532 signatures)
Tue Sep 25 07:56:17 2007 -> SelfCheck: Database modification detected. Forcing reload.
Tue Sep 25 07:56:17 2007 -> Reading databases from /var/lib/clamav
Tue Sep 25 08:02:01 2007 -> Database correctly reloaded (260532 signatures)
Le nombre de signatures ne semble pas avoir été modifiée. Est-il possible qu'il y a des modifications aussi fréquentes à la base de données anti-virus ?

Je suis bien conscient que mettre à disposition clamav pour ubuntu est un gros travail et j'en remercie les auteurs. Mais là je suis quelque peu perplexe sur la validité opérationnelle de ma configuration. Comment tester par exemple que la détection de virus dans les mails fonctionne ?

Je ne trouve aucune trace dans les entêtes de mails qu'une vérification antivirus a eu lieu en local, idem pour le spam avec spamassassin.


--
Bien cordialement,

Ch. Meessen


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-- 
ubuntu-fr mailing list
ubuntu-fr@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-fr

Répondre à