[clamav-users] ftp.heanet.ie mirror problem

Joel Esler (jesler) jesler at cisco.com
Tue Aug 4 20:12:33 EDT 2015

ACK on this guys.  A lot of the guys are on the way to Vegas, or will be tomorrow.  I’ve forwarded this email to the correct people in order to get things fixed.

Joel Esler
Manager, Threat Intelligence Team & Open Source
Talos Group

On Aug 4, 2015, at 7:47 PM, Al Varnell <alvarnell at mac.com<mailto:alvarnell at mac.com>> wrote:

I’ll respond in support of this.  Several ClamXav users in Sweden have also been complaining about reliability over the past month or so which have required periodic workarounds.


On Tue, Aug 04, 2015 at 01:22 PM, Anssi Johansson wrote:

It was recently brought to my attention that db.se.clamav.net<http://db.se.clamav.net> points to a single IP address,, which is ftp.heanet.ie<http://ftp.heanet.ie>.

Sadly that mirror does not seem to accept requests from anywhere, but instead replies with a 403. This can be tested with:

curl -H "Host: db.local.clamav.net<http://db.local.clamav.net>" -I

I would heartily recommend changing db.se.clamav.net<http://db.se.clamav.net> to point to CNAME db.northeu.clamav.net<http://db.northeu.clamav.net>, so problems with a single mirror would not block all of Sweden from updating their ClamAV installations.
Help us build a comprehensive ClamAV guide:


More information about the clamav-users mailing list