Mailing List Archive

Permanently banned from clamav
Hi, i'm Calogero Di Legami, I'm 24 and I live in Italy
My ISP is Tiscali, a normal Italian ISP
This morning when i tried to download “daily.cvd”, cloudflare told me that
i was permanently banned
Why?
Best Regards
Calogero Di Legami
Re: Permanently banned from clamav [ In reply to ]
Hi there,

On Sat, 2 Jul 2022, Calogero Di Legami via clamav-users wrote:

> Hi, i'm Calogero Di Legami, I'm 24 and I live in Italy
> My ISP is Tiscali, a normal Italian ISP
> This morning when i tried to download “daily.cvd”, cloudflare told me that
> i was permanently banned
> Why?

There has been widespread and serious abuse of the Content Delivery
Network, which forced the introduction of protection mechanisms.
Regular downloading of the entire daily database is not acceptable.
There are alternatives which cause much less network traffic.

Your problem *might* be because the IP address that you were using has
been seen to be abusive, or it might be because of the download method
which you were trying to use.

How were you trying to download the daily database?

The accepted method is to use the freshclam utility which was provided
with a fairly recent version of ClamAV. The utility takes care to use
the minimum network bandwith. Not using freshclam, or using a version
which is too old, are both likely to cause problems.

More information:

https://blog.clamav.net/

--

73,
Ged.
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: Permanently banned from clamav [ In reply to ]
I tried to download them with chrome version 103, on a mac running Mac OS X
10.5.7 with latest security patches
Best Regards

Calogero Di Legami

Il sab 2 lug 2022, 15:52 G.W. Haywood via clamav-users <
clamav-users@lists.clamav.net> ha scritto:

> Hi there,
>
> On Sat, 2 Jul 2022, Calogero Di Legami via clamav-users wrote:
>
> > Hi, i'm Calogero Di Legami, I'm 24 and I live in Italy
> > My ISP is Tiscali, a normal Italian ISP
> > This morning when i tried to download “daily.cvd”, cloudflare told me
> that
> > i was permanently banned
> > Why?
>
> There has been widespread and serious abuse of the Content Delivery
> Network, which forced the introduction of protection mechanisms.
> Regular downloading of the entire daily database is not acceptable.
> There are alternatives which cause much less network traffic.
>
> Your problem *might* be because the IP address that you were using has
> been seen to be abusive, or it might be because of the download method
> which you were trying to use.
>
> How were you trying to download the daily database?
>
> The accepted method is to use the freshclam utility which was provided
> with a fairly recent version of ClamAV. The utility takes care to use
> the minimum network bandwith. Not using freshclam, or using a version
> which is too old, are both likely to cause problems.
>
> More information:
>
> https://blog.clamav.net/
>
> --
>
> 73,
> Ged.
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
>
Re: Permanently banned from clamav [ In reply to ]
On 02.07.22 16:27, Calogero Di Legami via clamav-users wrote:
>I tried to download them with chrome version 103, on a mac running Mac OS X
>10.5.7 with latest security patches

so, neither freshclam, nor cvdupdate

this (downloading using chrome or other http clients) has caused problem to
delivery network and was blocked:

https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html

Use freshclam or cvdupdate: https://github.com/Cisco-Talos/cvdupdate


>> On Sat, 2 Jul 2022, Calogero Di Legami via clamav-users wrote:
>> > Hi, i'm Calogero Di Legami, I'm 24 and I live in Italy My ISP is
>> > Tiscali, a normal Italian ISP This morning when i tried to download
>> > “daily.cvd”, cloudflare told me that i was permanently banned Why?

>Il sab 2 lug 2022, 15:52 G.W. Haywood via clamav-users <
>clamav-users@lists.clamav.net> ha scritto:
>> There has been widespread and serious abuse of the Content Delivery
>> Network, which forced the introduction of protection mechanisms.
>> Regular downloading of the entire daily database is not acceptable.
>> There are alternatives which cause much less network traffic.
>>
>> Your problem *might* be because the IP address that you were using has
>> been seen to be abusive, or it might be because of the download method
>> which you were trying to use.
>>
>> How were you trying to download the daily database?
>>
>> The accepted method is to use the freshclam utility which was provided
>> with a fairly recent version of ClamAV. The utility takes care to use
>> the minimum network bandwith. Not using freshclam, or using a version
>> which is too old, are both likely to cause problems.
>>
>> More information:
>>
>> https://blog.clamav.net/


--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Enter any 12-digit prime number to continue.
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: Permanently banned from clamav [ In reply to ]
On 7/2/22 7:50 AM, G.W. Haywood via clamav-users wrote:
> Regular downloading of the entire daily database is not acceptable.

Please clarify what "regularly" means in this case?

Once a day / hour / week / month / other?

Regular just implies a cadence without specifying what that cadence is.



--
Grant. . . .
unix || die
Re: Permanently banned from clamav [ In reply to ]
I want to know also

Il sab 2 lug 2022, 17:27 Grant Taylor via clamav-users <
clamav-users@lists.clamav.net> ha scritto:

> On 7/2/22 7:50 AM, G.W. Haywood via clamav-users wrote:
> > Regular downloading of the entire daily database is not acceptable.
>
> Please clarify what "regularly" means in this case?
>
> Once a day / hour / week / month / other?
>
> Regular just implies a cadence without specifying what that cadence is.
>
>
>
> --
> Grant. . . .
> unix || die
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
>
Re: Permanently banned from clamav [ In reply to ]
On 7/2/22 9:09 AM, Matus UHLAR - fantomas wrote:
> this (downloading using chrome or other http clients) has caused problem
> to delivery network and was blocked:
>
> https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html

That message doesn't elaborate on what problem(s) was (were) caused.

The message does call out that people were downloading files too many
times a day when the file would change nominally once a day.

> Use freshclam or cvdupdate: https://github.com/Cisco-Talos/cvdupdate

I understand that freshclam / cvupdate have some optimizations to
determine if an update is needed or not.

I fail to see how using chrome, et al., or anything other than freshclam
/ cvupdate, with a weekly cadence will cause any problems for any
server, much less reputable CDN.

What am I not understanding? Please clarify what problem(s) was (were)
caused.



--
Grant. . . .
unix || die
Re: Permanently banned from clamav [ In reply to ]
Downloading the entire databases unnecessarily (using web browsers, etc) is banned because it results in higher volumes of data transfer which, in turn, costs more money. As such, using things other than freshclam or cvdupdate were explicitly banned.

There’s not much else to say.

Maarten


> On Jul 2, 2022, at 11:33, Grant Taylor via clamav-users <clamav-users@lists.clamav.net> wrote:
>
> ?On 7/2/22 9:09 AM, Matus UHLAR - fantomas wrote:
>> this (downloading using chrome or other http clients) has caused problem to delivery network and was blocked:
>> https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html
>
> That message doesn't elaborate on what problem(s) was (were) caused.
>
> The message does call out that people were downloading files too many times a day when the file would change nominally once a day.
>
>> Use freshclam or cvdupdate: https://github.com/Cisco-Talos/cvdupdate
>
> I understand that freshclam / cvupdate have some optimizations to determine if an update is needed or not.
>
> I fail to see how using chrome, et al., or anything other than freshclam / cvupdate, with a weekly cadence will cause any problems for any server, much less reputable CDN.
>
> What am I not understanding? Please clarify what problem(s) was (were) caused.
>
>
>
> --
> Grant. . . .
> unix || die
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: Permanently banned from clamav [ In reply to ]
>
> Please clarify what "regularly" means in this case?
>
> Once a day / hour / week / month / other?
>
> Regular just implies a cadence without specifying what that cadence is.

:) :) Better not go and reply on Instagram. The users there tend to have their own definition of words, and totally dislike references to something like a dictionary.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: Permanently banned from clamav [ In reply to ]
Hi Grant,

On Sat, 2 Jul 2022, Grant Taylor via clamav-users wrote:
> On 7/2/22 7:50 AM, G.W. Haywood via clamav-users wrote:
>> Regular downloading of the entire daily database is not acceptable.
>
> Please clarify what "regularly" means in this case?

I think Mr. Broekman has answered well enough, but I need to reply to
you because I don't want you to think I've ignored you, Grant.

> Once a day / hour / week / month / other?

I don't know, it isn't my CDN. But I did give a link for further
reading. I think there's enough there for a reasonable man, and I
know you fit that description. :)

> Regular just implies a cadence without specifying what that cadence is.

Yes, it does. :)

> I understand that freshclam / cvupdate have some optimizations to
> determine if an update is needed or not.

There's more to it than just whether or not an update is needed.

> I fail to see how using chrome, et al., or anything other than
> freshclam / cvupdate, with a weekly cadence will cause any problems
> for any server, much less reputable CDN.
>
> What am I not understanding? Please clarify what problem(s) was
> (were) caused.

To run a Content Delivery Network costs money. Abuse of it costs a
lot of money unnecessarily - and there was chronic, egregious abuse.
In my view, the providers of ClamAV went *well* beyond the call of
duty before finally putting their metaphorical foot down. If it had
been my own money, I would have been a lot less patient.

It isn't just the traffic. There are processes hanging around waiting
for slow connections as well. As of today, the daily file is around
185 Mbytes. Downloading it here would take a quarter of an hour. In
the past two months freshclam here has taken an average of 2.9 seconds
to download a diff file. Scale that up to the global demand and it's
a factor of at least several hundred just on the process count.

When people download 185 Mbytes instead of downloading a few kilobytes
to get the same result it incurs very significant, unnecessary costs
which are borne by those who provide the data - free of charge - to
people who are routinely abusing the service. And they've been asked
not to do it, so, well, it's just rude!

--

73,
Ged.
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: Permanently banned from clamav [ In reply to ]
I’ll be a little more kind, as this could be freshclam didn’t work maybe because of CGNAT and CloudFlare, and perhaps he’s troubleshooting with direct downloads. My suggestion would be run "freshclam —debug”. Heads up to the Clam team for really good logging on debug for showing such details going through SSL CAs, web transactions, et al…

CGNAT on ip4 wouldn’t surprise me, as I’ve personally seen issues with other CDNs, Netflix, Disney+, et al….

Sincerely,

Eric Tykwinski
TrueNet, Inc.
P: 610-429-8300

> On Jul 2, 2022, at 1:57 PM, G.W. Haywood via clamav-users <clamav-users@lists.clamav.net> wrote:
>
> Hi Grant,
>
> On Sat, 2 Jul 2022, Grant Taylor via clamav-users wrote:
>> On 7/2/22 7:50 AM, G.W. Haywood via clamav-users wrote:
>>> Regular downloading of the entire daily database is not acceptable.
>>
>> Please clarify what "regularly" means in this case?
>
> I think Mr. Broekman has answered well enough, but I need to reply to
> you because I don't want you to think I've ignored you, Grant.
>
>> Once a day / hour / week / month / other?
>
> I don't know, it isn't my CDN. But I did give a link for further
> reading. I think there's enough there for a reasonable man, and I
> know you fit that description. :)
>
>> Regular just implies a cadence without specifying what that cadence is.
>
> Yes, it does. :)
>
>> I understand that freshclam / cvupdate have some optimizations to
>> determine if an update is needed or not.
>
> There's more to it than just whether or not an update is needed.
>
>> I fail to see how using chrome, et al., or anything other than
>> freshclam / cvupdate, with a weekly cadence will cause any problems
>> for any server, much less reputable CDN.
>> What am I not understanding? Please clarify what problem(s) was
>> (were) caused.
>
> To run a Content Delivery Network costs money. Abuse of it costs a
> lot of money unnecessarily - and there was chronic, egregious abuse.
> In my view, the providers of ClamAV went *well* beyond the call of
> duty before finally putting their metaphorical foot down. If it had
> been my own money, I would have been a lot less patient.
>
> It isn't just the traffic. There are processes hanging around waiting
> for slow connections as well. As of today, the daily file is around
> 185 Mbytes. Downloading it here would take a quarter of an hour. In
> the past two months freshclam here has taken an average of 2.9 seconds
> to download a diff file. Scale that up to the global demand and it's
> a factor of at least several hundred just on the process count.
>
> When people download 185 Mbytes instead of downloading a few kilobytes
> to get the same result it incurs very significant, unnecessary costs
> which are borne by those who provide the data - free of charge - to
> people who are routinely abusing the service. And they've been asked
> not to do it, so, well, it's just rude!
>
> --
>
> 73,
> Ged.
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
Re: Permanently banned from clamav [ In reply to ]
This is correct.


Sent from my ? iPhone

> On Jul 2, 2022, at 11:50, Maarten Broekman via clamav-users <clamav-users@lists.clamav.net> wrote:
>
> ?Downloading the entire databases unnecessarily (using web browsers, etc) is banned because it results in higher volumes of data transfer which, in turn, costs more money. As such, using things other than freshclam or cvdupdate were explicitly banned.
>
> There’s not much else to say.
>
> Maarten
>
>
>>> On Jul 2, 2022, at 11:33, Grant Taylor via clamav-users <clamav-users@lists.clamav.net> wrote:
>>>
>>> ?On 7/2/22 9:09 AM, Matus UHLAR - fantomas wrote:
>>> this (downloading using chrome or other http clients) has caused problem to delivery network and was blocked:
>>> https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html
>>
>> That message doesn't elaborate on what problem(s) was (were) caused.
>>
>> The message does call out that people were downloading files too many times a day when the file would change nominally once a day.
>>
>>> Use freshclam or cvdupdate: https://github.com/Cisco-Talos/cvdupdate
>>
>> I understand that freshclam / cvupdate have some optimizations to determine if an update is needed or not.
>>
>> I fail to see how using chrome, et al., or anything other than freshclam / cvupdate, with a weekly cadence will cause any problems for any server, much less reputable CDN.
>>
>> What am I not understanding? Please clarify what problem(s) was (were) caused.
>>
>>
>>
>> --
>> Grant. . . .
>> unix || die
>>
>> _______________________________________________
>>
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/Cisco-Talos/clamav-documentation
>>
>> https://docs.clamav.net/#mailing-lists-and-chat
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: Permanently banned from clamav [ In reply to ]
On 7/2/22 11:57 AM, G.W. Haywood via clamav-users wrote:
> Hi Grant,

Hi Ged,

> I think Mr. Broekman has answered well enough, but I need to reply
> to you because I don't want you to think I've ignored you, Grant.

I didn't expect you to /personally/ reply. Though I do appreciate you
going out of your way.

> I don't know, it isn't my CDN. But I did give a link for further
> reading. I think there's enough there for a reasonable man, and I
> know you fit that description. :)

I read the link and I still have questions.

Though the questions are somewhat academic as I am, have been, and will
continue to use the prescribed method of freshclam.

> Yes, it does. :)

I assume you are saying that "regularly" specifies what the cadence is.

To which I maintain no it does not.

I file my taxes /regularly/. Read /yearly/.

I eat meals /regularly/. Read /multiple/ /times/ /a/ /day/.

Halley's Comet passes the Earth /regularly/. Read /every/ /75/ /years/.

Ergo /regularly/ can have wildly different cadences.

> There's more to it than just whether or not an update is needed.

Fair enough.

> To run a Content Delivery Network costs money. Abuse of it costs a
> lot of money unnecessarily - and there was chronic, egregious abuse.

I agree with all of that.

> In my view, the providers of ClamAV went *well* beyond the call of
> duty before finally putting their metaphorical foot down. If it had
> been my own money, I would have been a lot less patient.

I am grateful for the larger team that supports / provides ClamAV.

> It isn't just the traffic. There are processes hanging around waiting
> for slow connections as well. As of today, the daily file is around
> 185 Mbytes. Downloading it here would take a quarter of an hour.
> In the past two months freshclam here has taken an average of 2.9
> seconds to download a diff file. Scale that up to the global demand
> and it's a factor of at least several hundred just on the process
> count.

I have no reason to doubt your statement.

But I feel like the comments, especially the lack of definition of the
/cadence/ of regularly fails to account for someone using a web browser
to download files once every three years.

> When people download 185 Mbytes instead of downloading a few kilobytes
> to get the same result it incurs very significant, unnecessary costs
> which are borne by those who provide the data - free of charge -
> to people who are routinely abusing the service. And they've been
> asked not to do it, so, well, it's just rude!

I would find it suspicious if someone were to say that downloading 185
MB once every three years is abuse of a system.



--
Grant. . . .
unix || die
Re: Permanently banned from clamav [ In reply to ]
On Jul 2, 2022, at 6:33 PM, Grant Taylor via clamav-users <clamav-users@lists.clamav.net> wrote:
> I assume you are saying that "regularly" specifies what the cadence is.
>
> To which I maintain no it does not.
>
> I file my taxes /regularly/. Read /yearly/.
>
> I eat meals /regularly/. Read /multiple/ /times/ /a/ /day/.
>
> Halley's Comet passes the Earth /regularly/. Read /every/ /75/ /years/.
>
> Ergo /regularly/ can have wildly different cadences.
> ...
> But I feel like the comments, especially the lack of definition of the /cadence/ of regularly fails to account for someone using a web browser to download files once every three years.
>
>> When people download 185 Mbytes instead of downloading a few kilobytes to get the same result it incurs very significant, unnecessary costs which are borne by those who provide the data - free of charge - to people who are routinely abusing the service. And they've been asked not to do it, so, well, it's just rude!
>
> I would find it suspicious if someone were to say that downloading 185 MB once every three years is abuse of a system.

There used to be limits on the number of time you could run freshclam, as memory serves it was four times an hour unless you did something specific (which I’ve forgotten) allowing it to be run more often, but lots has changed since then.

The most important thing for you to understand is that the ClamAV signature database is almost never updated more than once a day, around 9am GMT, plus or minus a half hour. And since running freshclam when there isn’t any new update only checks your local DNS there is no impact on any CDN so it’s strictly up to you on how often you want to waste computer and Internet time to run that DNS check and how critical you feel it necessary to have an update as soon as possible after it’s posted. I see mine is set at four times a day, though I don’t recall how I came up with that number and can’t really recommend what cadence needs to mean in your case.

-Al-

CalmXAV User
Re: Permanently banned from clamav [ In reply to ]
Hi Grant,

On Sat, 2 Jul 2022, Grant Taylor via clamav-users wrote:

> ... the questions are somewhat academic ...

https://en.wikipedia.org/wiki/How_many_angels_can_dance_on_the_head_of_a_pin%3F

:)

> I assume you are saying that "regularly" specifies what the cadence is.

No. My "Yes, it does." was in agreement with your "implies a cadence" but
I can see how it might be open to misinterpretation, for which I apologize.

It was not my intention to make such a meal of this.

> But I feel like the comments, especially the lack of definition of the
> /cadence/ of regularly fails to account for someone using a web browser to
> download files once every three years.

Perhaps, but I think it accounts for millions of people all doing the
same thing, so now, it isn't allowed at all:

https://lists.clamav.net/pipermail/clamav-users/2021-March/010685.html

> I would find it suspicious if someone were to say that downloading 185 MB
> once every three years is abuse of a system.

I don't think anyone said that.

--

73,
Ged.
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: Permanently banned from clamav [ In reply to ]
Hi, i am the guy who started the discussion...
How the heck can i do freshclam or use cvdupdate on Windows 9x machine? If
i download the database trough clamwin but it said “malformed database”, so
i tried to download files from browser and i got banned
I have to do freshclam on a Linux machine and transfer files to Windows 98?
Best Regards

Calogero Di Legami


Il dom 3 lug 2022, 09:08 G.W. Haywood via clamav-users <
clamav-users@lists.clamav.net> ha scritto:

> Hi Grant,
>
> On Sat, 2 Jul 2022, Grant Taylor via clamav-users wrote:
>
> > ... the questions are somewhat academic ...
>
>
> https://en.wikipedia.org/wiki/How_many_angels_can_dance_on_the_head_of_a_pin%3F
>
> :)
>
> > I assume you are saying that "regularly" specifies what the cadence is.
>
> No. My "Yes, it does." was in agreement with your "implies a cadence" but
> I can see how it might be open to misinterpretation, for which I apologize.
>
> It was not my intention to make such a meal of this.
>
> > But I feel like the comments, especially the lack of definition of the
> > /cadence/ of regularly fails to account for someone using a web browser
> to
> > download files once every three years.
>
> Perhaps, but I think it accounts for millions of people all doing the
> same thing, so now, it isn't allowed at all:
>
> https://lists.clamav.net/pipermail/clamav-users/2021-March/010685.html
>
> > I would find it suspicious if someone were to say that downloading 185
> MB
> > once every three years is abuse of a system.
>
> I don't think anyone said that.
>
> --
>
> 73,
> Ged.
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
>
Re: Permanently banned from clamav [ In reply to ]
Hi there,

On Sun, 3 Jul 2022, Calogero Di Legami via clamav-users wrote:

> ... i am the guy who started the discussion...

Yes, we know. Hello again. :)

> ... i download the database trough clamwin ...

You could have saved us a lot of time by mentioning that earlier. :/

The current version of ClamWin is more than a year out of date. This
isn't the first time that I've pointed out on this list that ClamWin
does not seem to be properly supported. My opinion is that ClamWin
should be avoided. My full opinion is unsuitable for publication.

The people who provide both ClamAV and the official ClamAV signatures
have no relationship with ClamWin as far as I know. Although ClamWin
is mentioned in this page:

https://docs.clamav.net/manual/Installing/Community-projects.html

there is a disclaimer at the top of the page. If it were up to me the
disclaimer would be worded much more strongly, perhaps something along
the lines of "it is YOUR responsibility to assess the suitability of
anything mentioned below for use in your particular situation".

> How the heck can i do freshclam or use cvdupdate on Windows 9x machine?

I'm not sure you can. Please read the introduction:

https://docs.clamav.net/Introduction.html

Despite what it says on the ClamWin pages, very old Windows versions
are not supported by ClamAV; they are also not supported by Microsoft.
The oldest Windows version which ClamAV claims to support is Windows 7.
Even so it is most unlikely that you will have a supported copy, and
in any case all support for Windows 7 will cease in January 2023.

If you must use Windows, please upgrade to a supported version. I
haven't seen a Windows 98 machine for a very long time, so I might
just have forgotten, but even if ClamAV had been installed on one I
don't think I've ever seen a Windows 9x machine which would have had
enough memory to load the current official ClamAV database - by itself
it takes up over a gigabyte. At present you'd probably need three or
four gigabytes (it depends what else the machine is doing), but with
so much memory Windows 9x may well give problems related to the large
amount of memory installed - problems which affect both the operating
system and some of its utilities.

Unless you know what you're doing, connecting unsupported versions of
Windows to the Internet is unsafe and irresponsible. You're probably
just going to cause problems for everyone else.

Out of interest, how much RAM do you have installed in your machine?

--

73,
Ged.
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: Permanently banned from clamav [ In reply to ]
On 7/3/22 1:07 AM, G.W. Haywood via clamav-users wrote:
> Hi Grant,

Hi Ged,

> No.  My "Yes, it does." was in agreement with your "implies a cadence" but
> I can see how it might be open to misinterpretation, for which I apologize.

Ah. :-) Thank you for the clarification.

> It was not my intention to make such a meal of this.

Sometimes these types of meals do more to feed (inform) people than one
realizes. They tend to be shallower and wider than some other
discussions. As such they have the possibility to provide information
to answer other people's questions without knowing that such happens.

> Perhaps, but I think it accounts for millions of people all doing the
> same thing, so now, it isn't allowed at all:
>
> https://lists.clamav.net/pipermail/clamav-users/2021-March/010685.html

That's an informative message.

I'm sorry that there are so many abusers. :-(

> I don't think anyone said that.
Maybe it wasn't said directly, that that's what I took away from the
spirit of the discussion. :-/

Calogero's response seems to be an example of someone that needs to use
a web browser to do the download for a technical reason.



--
Grant. . . .
unix || die
Re: Permanently banned from clamav [ In reply to ]
Freshclam and cvdupdate can be ran as often as you want. They check DNS to see if an update is needed before it attempts to download from the CDN, so knock yourself out.

That being said, ClamAV only publishes updates once a day. So hourly is PLENTY of time to run the check.


Sent from my ? iPhone

> On Jul 3, 2022, at 12:51, Grant Taylor via clamav-users <clamav-users@lists.clamav.net> wrote:
>
> ?On 7/3/22 1:07 AM, G.W. Haywood via clamav-users wrote:
>> Hi Grant,
>
> Hi Ged,
>
>> No. My "Yes, it does." was in agreement with your "implies a cadence" but
>> I can see how it might be open to misinterpretation, for which I apologize.
>
> Ah. :-) Thank you for the clarification.
>
>> It was not my intention to make such a meal of this.
>
> Sometimes these types of meals do more to feed (inform) people than one realizes. They tend to be shallower and wider than some other discussions. As such they have the possibility to provide information to answer other people's questions without knowing that such happens.
>
>> Perhaps, but I think it accounts for millions of people all doing the
>> same thing, so now, it isn't allowed at all:
>> https://lists.clamav.net/pipermail/clamav-users/2021-March/010685.html
>
> That's an informative message.
>
> I'm sorry that there are so many abusers. :-(
>
>> I don't think anyone said that.
> Maybe it wasn't said directly, that that's what I took away from the spirit of the discussion. :-/
>
> Calogero's response seems to be an example of someone that needs to use a web browser to do the download for a technical reason.
>
>
>
> --
> Grant. . . .
> unix || die
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat