Overall — we’re doing much better.
We’ve reduced the amount of bandwidth we’re serving by 4x, so we’ve made significant progress.
However, we still have over 700 individual systems downloading the full daily.cvd over 200x a day. (This should be once a day,
if that.)
If you are not using 0.103.2 and it’s accompanying FreshClam to download these updates, and when you do create a NEW FreshClam.conf file and move your settings to that. We’re going to have to start blocking these atrocious abusers, as the rate
limits are hurting everyone else at this point.
Please help us, stay diligent, keep going keep upgrading. Upgrade to 0.103.2, and keep your mirrors.dat file around, this file contains a snapshot of where you are in your update progression so that the next time that FreshClam run, it can start
where it left off.
--
Joel Esler
Manager, Communities Division
Cisco Talos Intelligence Group