[clamav-users] Unable to download clamav cvd file using google cloud python function

[Al Varnell]

Can't believe how many people haven't been read this forum...

-Al-

On Mon, Mar 08, 2021 at 11:23 AM, Joel Esler via clamav-users (jesler) wrote:
> As a result of events documented in places here:
> https://lists.clamav.net/pipermail/clamav-users/2021-March/010577.html <https://lists.clamav.net/pipermail/clamav-users/2021-March/010577.html>
> and
> https://lists.clamav.net/pipermail/clamav-users/2021-March/010543.html <https://lists.clamav.net/pipermail/clamav-users/2021-March/010543.html>
> 
> We’ve been forced to take emergency measures to protect the ClamAV environment.
> 
> Please Immediately switch to using Freshclam or https://github.com/micahsnyder/cvdupdate <https://github.com/micahsnyder/cvdupdate> to update your AV definitions.
> 
> Sorry for the inconvenience, but we are currently in emergency mode and have to make several drastic changes over the several days.
> 
> Joel Esler
> Manager, Communities Division
> Cisco Talos Intelligence Group
> http://www.talosintelligence.com <http://www.talosintelligence.com/> | https://www.snort.org <https://www.snort.org/>

On Wed, Mar 10, 2021 at 02:07 AM, Kachare, Ganesh, Vodafone Group (External) via clamav-users wrote:
> Hi All,
>  
> I am getting error  http client 403 where I have deployed google cloud function using python to download the daily clamav virus definitions from http://database.clamav.net <http://database.clamav.net/>.
>  
> It seems clamav is blocking access to google cloud IPs and denied the requests.
>  
> Has anybody faced similar issues and any workarounds available? Can Clamav enable our IPs and allow to download daily virus definition files?
>  
> Any help is greatly appreciated !!
>  
> Error log from google cloud function.
>  
> clamav_definitions_updaterc7jdhxftjt82 Traceback (most recent call last): File "/layers/google.python.pip/pip/lib/python3.8/site-packages/flask/app.py", line 2447, in wsgi_app response = self.full_dispatch_request() File "/layers/google.python.pip/pip/lib/python3.8/site-packages/flask/app.py", line 1952, in full_dispatch_request rv = self.handle_user_exception(e) File "/layers/google.python.pip/pip/lib/python3.8/site-packages/flask/app.py", line 1821, in handle_user_exception reraise(exc_type, exc_value, tb) File "/layers/google.python.pip/pip/lib/python3.8/site-packages/flask/_compat.py", line 39, in reraise raise value File "/layers/google.python.pip/pip/lib/python3.8/site-packages/flask/app.py", line 1950, in full_dispatch_request rv = self.dispatch_request() File "/layers/google.python.pip/pip/lib/python3.8/site-packages/flask/app.py", line 1936, in dispatch_request return self.view_functions[rule.endpoint](**req.view_args) File "/layers/google.python.pip/pip/lib/python3.8/site-packages/functions_framework/__init__.py", line 149, in view_func function(data, context) File "/workspace/main.py", line 42, in get_latest_clamav_definitions downloaded_file = download_file_to_temp(url) File "/workspace/main.py", line 18, in download_file_to_temp response.raise_for_status() File "/layers/google.python.pip/pip/lib/python3.8/site-packages/requests/models.py", line 943, in raise_for_status raise HTTPError(http_error_msg, response=self) requests.exceptions.HTTPError: 403 Client Error: Forbidden for url: http://database.clamav.net/daily.cvd <http://database.clamav.net/daily.cvd>
>  
>  
>  
> Regards,
> Ganesh Kachare


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210310/88c2edb7/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4376 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210310/88c2edb7/attachment.bin>