[clamav-users] ClamAV mirrors have gotten worse!

[G.W. Haywood]

Hi there,

On Thu, 22 Nov 2018, Paul Kosinski wrote:

> I wonder how many users of ClamAV actually log their freshclam updates.

I've been using ClamAV for more than a decade.  I've already said on
the list that I log all freshclam updates and that in general my
experience is that the mirrors are very reliable.  During the switch
to Cloudflare I experienced no problems.  There was an issue back in
March/April this year which I believe was the first that ran for more
than a day for as long as I can remember.

Like Mr. Peterson (and *un*like this mailing list's configuration :) I
run freshclam so as to avoid pile-ups.  Typically I fetch three updates
per day and they succeed as regularly as clockwork.

On Wed, 21 Nov 2018, Paul Kosinski wrote:

> ... 'LocalIPAddress' is the *outgoing* IP address ...
> .. To sum up, the "LocalIPAddress 10.11.14.160" is ...

I might be a little late to the party here, but are you saying that
10.11.14.160 is the IP address which the Cloudflare servers see?  Some
ISPs do issue RFC1918 addresses to their clients but I'd expect a NAT
gateway somewhere between your interface and Cloudflare, so that the
Cloudflare servers see an Internet-routable IP.  If there is such a
gateway, maybe it's worth a look on the other side of it.  If there
isn't, I'd expect problems because packets from/to RFC1918 addresses
should never be allowed onto the public Internet.  Please forgive me
for teaching granny; this *might* be news to some who are reading now.

-- 

73,
Ged.