[clamav-users] Latest report on update "delays"

[Paul Kosinski]

"...it works smoothly for a very large number of people, myself
included."

It would be interesting to know what percentage have experienced our
original problem of all mirrors ending up blacklisted. I also wonder
how many ClamAV users monitor their logs: I don't remember ClamAV
*actively* reporting when signatures are out date (like some
Windows AV does).


"Have you absolutely ruled out the possibility of someone having set up
a transparent proxy on your border router(s)?"

I guess I wouldn't put it past Comcast/Xfinity to interpose a proxy,
but if the proxy is transparent, how would one detect it? And would a
proxy once in a while be over an hour out of date? Maybe nobody in
*this* part of the Boston area uses ClamAV, but Boston is not exactly
Ulaanbaatar Mongolia (an actual Cloudflare mirror!).



On Tue, 23 Oct 2018 16:52:19 +1100
"Gary R. Schmidt" <grschmidt at acm.org> wrote:

> On 23/10/2018 16:17, Paul Kosinski wrote:
> > Two observations: First, a smoothly working freshclam mechanism
> > shouldn't require workarounds.
> Well, yes, but it works smoothly for a very large number of people, 
> myself included.
> 
> > And I suspect many ClamAV users
> > wouldn't be able to deal with workarounds like this.
> This I disagree with - if they are bright enough to go looking for 
> something like ClamAV then they'd be able to handle the trivial task
> of adding a line to a crontab file.
> 
> > Second, any time freshclam fails due to an out-of-sync problem,
> > there has been a useless load on the mirrors (although I suppose
> > using cdiffs would significantly reduce the useless data transfer).
> > Plus there is useless load on the client machine and its LAN.
> There is a load only on the mirrors you are accessing, the rest of
> them keep doing their job.
> 
> Have you absolutely ruled out the possibility of someone having set
> up a transparent proxy on your border router(s)?
> 
> 	Cheers,
> 		Gary	B-)
> _______________________________________________