[clamav-users] DNS queries to daily.xxxxx.xx.x.x.XXXXXXXX.ping.clamav.net

Kevin Kretz kevin at rentec.com
Wed Feb 10 20:31:26 UTC 2016


Hi list,


Our clamav is part of our email system that lives on a part of our network that has as controlled as possible access (both in to and out from).  We have Clam using an HTTP proxy for its updates which seems to be working well.

We notice occasional DNS queries in the format listed in the subject - where xxxx are numbers and XXXX are letters and numbers, looks like hexadecimal.  For documenting our traffic in and out of this network, I need to either make it stop, or justify its being acceptable.

Can someone shed some light on these queries?  I've looked through the list archives, the manual, and the FAQ but haven't found an answer.


Thanks 


Kevin Kretz



More information about the clamav-users mailing list