Even though I built the latest ClamAV (0.102.1) with the 'configure'
option "--disable-ipv6", freshclam tried using IPv6 addresses when it
failed to connect via IPv4 due to a firewall rule (which I now changed
to allow port 443 as well as port 80).
This rule was part of hardening our mail server a bit by blocking most
outbound connections, so I had added explicit pass-thru for the
clamav.net IPv4 addresses -- previously only port 80, now also 443.
(And I had to allow these outbound connections because my previous
attempts at local mirroring collapsed with the switch to Cloudflare:
the CVD files on the BOS Cloudflare mirror seemed to be out of date a
lot, as discussed in my previous postings).
P.S. As far as I can tell, disallowing IPv6 everywhere within, in to
and out of our small LAN, does not block anything of importance. Does
anyone know of anything on the Internet that is IPv6 *only*, and is
important enough to justify spending weeks of work rebuilding our
firewall (not to mention reconfiguring everything else)?
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
option "--disable-ipv6", freshclam tried using IPv6 addresses when it
failed to connect via IPv4 due to a firewall rule (which I now changed
to allow port 443 as well as port 80).
This rule was part of hardening our mail server a bit by blocking most
outbound connections, so I had added explicit pass-thru for the
clamav.net IPv4 addresses -- previously only port 80, now also 443.
(And I had to allow these outbound connections because my previous
attempts at local mirroring collapsed with the switch to Cloudflare:
the CVD files on the BOS Cloudflare mirror seemed to be out of date a
lot, as discussed in my previous postings).
P.S. As far as I can tell, disallowing IPv6 everywhere within, in to
and out of our small LAN, does not block anything of importance. Does
anyone know of anything on the Internet that is IPv6 *only*, and is
important enough to justify spending weeks of work rebuilding our
firewall (not to mention reconfiguring everything else)?
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml