[clamav-users] Freshclam 0.102.1 ignores "--disable-ipv6"

[Al Varnell]

I’m fairly certain this was previously discussed. Might want to check the archives.

I have not run across any site yet that is IPv6 only,  but I suspect users in Asia have. 

Sent from my iPad

-Al-

> On Jan 6, 2020, at 18:12, Paul Kosinski via clamav-users <clamav-users at lists.clamav.net> wrote:
> 
> Even though I built the latest ClamAV (0.102.1) with the 'configure'
> option "--disable-ipv6", freshclam tried using IPv6 addresses when it
> failed to connect via IPv4 due to a firewall rule (which I now changed
> to allow port 443 as well as port 80). 
> 
> This rule was part of hardening our mail server a bit by blocking most
> outbound connections, so I had added explicit pass-thru for the
> clamav.net IPv4 addresses -- previously only port 80, now also 443.
> (And I had to allow these outbound connections because my previous
> attempts at local mirroring collapsed with the switch to Cloudflare:
> the CVD files on the BOS Cloudflare mirror seemed to be out of date a
> lot, as discussed in my previous postings).
> 
> 
> P.S. As far as I can tell, disallowing IPv6 everywhere within, in to
> and out of our small LAN, does not block anything of importance. Does
> anyone know of  anything on the Internet that is IPv6 *only*, and is
> important enough to justify spending weeks of work rebuilding our
> firewall (not to mention reconfiguring everything else)?
> 
> _______________________________________________
> 
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml