[clamav-users] Restriction of downloads

Sat Mar 13 13:19:22 UTC 2021

Synology.

Eero

On Sat, Mar 13, 2021 at 3:09 PM Rémy DODIN via clamav-users <
clamav-users at lists.clamav.net> wrote:

> My synology Clamav is at   "Upgraded ClamAV engine to 0.102.3"
> As it is written here and my packets are at latest update level.
> https://www.synology.com/fr-fr/releaseNote/AntiVirus?model=DS713%2B
>
> But virus signature is unabled to be refreshed as I wrote it !
> It worked until last refresh from 03/06/21 and then, high CPU and storage
> utilisation and no refresh.
> It looks like it is going into a loop trying to get virus database
> updates....  (If it goes into a loop, then the refresh tool may have issue
> ! and may be you expected abuse due to high freshclam or virus database
> update is into a loop due incorrect process ?
>
> If a loop exist, who's the culprit ? (I'm not a developper and just end
> user with no skills)
> synology ? or Clamav ?
> I just run again database update option and after more than 4 minutes, it
> was always runing and I have to force a stop to not have it running 24/24h.
> Consuming a lot of CPU, energy (not eco friendly) - It is acting like a
> virus trying to kill a system, strange !
>
> Very strange
>
> Regards
> Rémy
>
>
> "Ce message et toutes ses pièces jointes sont établis à l'intention
> exclusive de son/ses destinataire(s) et sont confidentiels. Si vous recevez
> ce message par erreur, merci de le détruire et d'en avertir immédiatement
> l'expéditeur. Toute utilisation de ce message et/ou de son contenu par une
> personne autre qu'un destinataire, et toute diffusion ou publication
> ultérieure du contenu de ce message, en totalité ou en partie, est
> interdite sauf autorisation préalable et écrite de l'émetteur"
> ------------------------------
> *De: *"Joel Esler (jesler) via clamav-users" <
> clamav-users at lists.clamav.net>
> *À: *"ClamAV users ML" <clamav-users at lists.clamav.net>
> *Cc: *"Joel Esler (jesler)" <jesler at cisco.com>
> *Envoyé: *Samedi 13 Mars 2021 13:47:08
> *Objet: *Re: [clamav-users] Restriction of downloads
>
> Team—
>
> The qnap and synology issues are a result of the EOL of <0.100. Not as a
> result of the abusive downloaders. Two separate issues.
>
> Our EOL policy that has been in place is “current version with all minor
> patches and one back with all minor patches”. This has been our policy for
> about 8–10 years. Our current version is 0.103.1, which means according to
> our EOL policy, we should allow .103, and .102. *Everything below that we
> should block. *
>
> It is becoming more and more necessary to enforce these cut off points
> because of many reasons. Load to the mirror network being one. So, .100,
> and .101 will continue to be supported for a bit, but soon, we’re going to
> have to cut those off too.
>
> The vast majority of ClamAV users are on 0.102.4. The outliners are people
> that haven’t upgraded to a latest version should start upgrading to get
> ahead of the curve.
>
> Sent from my  iPhone
>
> On Mar 13, 2021, at 05:52, Matus UHLAR - fantomas <uhlar at fantomas.sk>
> wrote:
>
> 
>
> I just found that my "antivirus essentiel" installed package
>
> provided by Synology is unable to update virus definition file since
>
> 03/06/2021 !
>
>
> On 13/03/2021 00:47, G.W. Haywood via clamav-users wrote:
>
> Then should you not be talking to Synology?
>
>
> On 13.03.21 11:16, Paul Smith via clamav-users wrote:
>
> Maybe Synology and QNAP, etc could run private mirrors for their devices
> which they don't provide up-to-date Freshclam for...
>
>
> QNAP runs freshclam. checked now with my 419P+:
>
> ClamAV update process started at Sat Mar 13 12:47:36 2021
> WARNING: getpatch: Can't download main-55.cdiff from database.clamav.net
> ERROR: getpatch: Can't download main-55.cdiff from database.clamav.net
> WARNING: Incremental update failed, trying to download main.cvd
> ERROR: Can't download main.cvd from database.clamav.net
> Giving up on database.clamav.net...
> Update failed. Your network may be down or none of the mirrors listed in
> /etc/config/freshclam.conf is working. Check
> http://www.clamav.net/doc/mirrors-faq.html for possible reasons.
>
>
> However, many of QNAP devices have obsolete clamav version:
>
> [~] # freshclam -V
> ClamAV 0.99.3/17260/Wed May 22 12:40:22 2013
>
>
> --
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> Microsoft dick is soft to do no harm
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
>
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210313/48c54b05/attachment.htm>