Hello Vincent,
Thank you for your email. As a result of events documented in places here:
https://lists.clamav.net/pipermail/clamav-users/2021-March/010577.html
and
https://lists.clamav.net/pipermail/clamav-users/2021-March/010543.html
We’ve been forced to take emergency measures to protect the ClamAV environment.
Please Immediately switch to using Freshclam or https://github.com/micahsnyder/cvdupdate to update your AV definitions.
Sorry for the inconvenience, but we are currently in emergency mode and have to make several drastic changes over the last several days.
--
Joel Esler
Manager, Communities Division
Cisco Talos Intelligence Group
http://www.talosintelligence.com | https://www.snort.org
On Mar 9, 2021, at 4:03 AM, Vincent ROL <vincent.rol@asp-public.fr<mailto:vincent.rol@asp-public.fr>> wrote:
Joel,
We now have a 503 error on our attempts at 9:55 am (GMT +1).
I confirm that we present ourselves well with the IP 217.109.233.245.
Do you see our attempts ?
Best regards.
<IMAGE.jpg>
2 rue du Maupas
87040 Limoges cedex 1
tel : 05 55 12 00 00
www.asp-public.fr<http://www.asp-public.fr>
Soyons eco-responsables,
n imprimons nos courriels que si necessaire.
>>> "Joel Esler (jesler)" <jesler@cisco.com<mailto:jesler@cisco.com>> 08/03/2021 16:37 >>>
Vincent,
I don’t show that IP in our logs.
However, check out: https://lists.clamav.net/pipermail/clamav-users/2021-March/010577.html<https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.clamav.net_pipermail_clamav-2Dusers_2021-2DMarch_010577.html&d=DwMGaQ&c=0kBPlhzP2Wk-mo3x7LnvXMg7O3oO8ENsbbGO1EExS8k&r=DUeGA6RLxWnPneyQ9cCt8DcrR3i8CGywI3xy_PaM9eY&m=PLPz-Ouf6_RerzE8b8nn3WeDsvx-rPMAz8kmBzfMBIk&s=UiOw0PN7fFl3p9u3jgYVu0g7WheeHsMba3pCOQ7zb40&e=>
--
Joel Esler
Manager, Communities Division
Cisco Talos Intelligence Group
http://www.talosintelligence.com<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.talosintelligence.com&d=DwMGaQ&c=0kBPlhzP2Wk-mo3x7LnvXMg7O3oO8ENsbbGO1EExS8k&r=DUeGA6RLxWnPneyQ9cCt8DcrR3i8CGywI3xy_PaM9eY&m=PLPz-Ouf6_RerzE8b8nn3WeDsvx-rPMAz8kmBzfMBIk&s=VEAvTbS-fIcsVZg0-VRocr_NRFFe7Fs7Fs2E2pU3QXI&e=> | https://www.snort.org<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.snort.org&d=DwMGaQ&c=0kBPlhzP2Wk-mo3x7LnvXMg7O3oO8ENsbbGO1EExS8k&r=DUeGA6RLxWnPneyQ9cCt8DcrR3i8CGywI3xy_PaM9eY&m=PLPz-Ouf6_RerzE8b8nn3WeDsvx-rPMAz8kmBzfMBIk&s=PrJZa7Z_GnuKHxBlpD7EHKJMm2UbEarXv1hsnziRLyI&e=>
On Mar 8, 2021, at 5:12 AM, Vincent ROL <vincent.rol@asp-public.fr<mailto:vincent.rol@asp-public.fr>> wrote:
Hello,
We are a French public administration, the Service and Payment Agency (ASP).
We download the main.cvd, daily.cvd and bytecode.cvd files every day at 7:45 am.
As of 03/06/2021, we are getting the 403 Forbidden error.
We go through a proxy, and we present ourselves with the IP 217.109.233.245, can you unblock us please?
Best Regards.
<IMAGE.jpg>
2 rue du Maupas
87040 Limoges cedex 1
tel : 05 55 12 00 00
www.asp-public.fr<http://www.asp-public.fr/>
Soyons eco-responsables,
n imprimons nos courriels que si necessaire.
-------------------------------------------------------------------------------------------------------
Ce message peut contenir des INFORMATIONS CONFIDENTIELLES destinees a l'usage exclusif du destinataire. Si vous le recevez par erreur, merci de bien vouloir nous en avertir immediatement par telephone ou messagerie, de le detruire et de n'en divulguer le contenu a personne.
This message may contain CONFIDENTIAL INFORMATION intended only for use by the addressee. If you have received it by mistake, thank you for notifying us immediately by telephone or by e-mail, and please, delete it and do not deliver it to anyone else .
-------------------------------------------------------------------------------------------------------
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
***************** MESSAGE IMPORTANT *******************
*** La pièce jointe à ce courriel a été analysée ***
*** par un antivirus qui n'a rien détecté d'anormal. ***
*** Ceci étant, n'ouvrez pas de pièces jointes quand ***
*** vous ne connaissez pas l'expéditeur du courriel. ***
-------------------------------------------------------------------------------------------------------
Ce message peut contenir des INFORMATIONS CONFIDENTIELLES destinees a l'usage exclusif du destinataire. Si vous le recevez par erreur, merci de bien vouloir nous en avertir immediatement par telephone ou messagerie, de le detruire et de n'en divulguer le contenu a personne.
This message may contain CONFIDENTIAL INFORMATION intended only for use by the addressee. If you have received it by mistake, thank you for notifying us immediately by telephone or by e-mail, and please, delete it and do not deliver it to anyone else .
-------------------------------------------------------------------------------------------------------
Thank you for your email. As a result of events documented in places here:
https://lists.clamav.net/pipermail/clamav-users/2021-March/010577.html
and
https://lists.clamav.net/pipermail/clamav-users/2021-March/010543.html
We’ve been forced to take emergency measures to protect the ClamAV environment.
Please Immediately switch to using Freshclam or https://github.com/micahsnyder/cvdupdate to update your AV definitions.
Sorry for the inconvenience, but we are currently in emergency mode and have to make several drastic changes over the last several days.
--
Joel Esler
Manager, Communities Division
Cisco Talos Intelligence Group
http://www.talosintelligence.com | https://www.snort.org
On Mar 9, 2021, at 4:03 AM, Vincent ROL <vincent.rol@asp-public.fr<mailto:vincent.rol@asp-public.fr>> wrote:
Joel,
We now have a 503 error on our attempts at 9:55 am (GMT +1).
I confirm that we present ourselves well with the IP 217.109.233.245.
Do you see our attempts ?
Best regards.
<IMAGE.jpg>
2 rue du Maupas
87040 Limoges cedex 1
tel : 05 55 12 00 00
www.asp-public.fr<http://www.asp-public.fr>
Soyons eco-responsables,
n imprimons nos courriels que si necessaire.
>>> "Joel Esler (jesler)" <jesler@cisco.com<mailto:jesler@cisco.com>> 08/03/2021 16:37 >>>
Vincent,
I don’t show that IP in our logs.
However, check out: https://lists.clamav.net/pipermail/clamav-users/2021-March/010577.html<https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.clamav.net_pipermail_clamav-2Dusers_2021-2DMarch_010577.html&d=DwMGaQ&c=0kBPlhzP2Wk-mo3x7LnvXMg7O3oO8ENsbbGO1EExS8k&r=DUeGA6RLxWnPneyQ9cCt8DcrR3i8CGywI3xy_PaM9eY&m=PLPz-Ouf6_RerzE8b8nn3WeDsvx-rPMAz8kmBzfMBIk&s=UiOw0PN7fFl3p9u3jgYVu0g7WheeHsMba3pCOQ7zb40&e=>
--
Joel Esler
Manager, Communities Division
Cisco Talos Intelligence Group
http://www.talosintelligence.com<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.talosintelligence.com&d=DwMGaQ&c=0kBPlhzP2Wk-mo3x7LnvXMg7O3oO8ENsbbGO1EExS8k&r=DUeGA6RLxWnPneyQ9cCt8DcrR3i8CGywI3xy_PaM9eY&m=PLPz-Ouf6_RerzE8b8nn3WeDsvx-rPMAz8kmBzfMBIk&s=VEAvTbS-fIcsVZg0-VRocr_NRFFe7Fs7Fs2E2pU3QXI&e=> | https://www.snort.org<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.snort.org&d=DwMGaQ&c=0kBPlhzP2Wk-mo3x7LnvXMg7O3oO8ENsbbGO1EExS8k&r=DUeGA6RLxWnPneyQ9cCt8DcrR3i8CGywI3xy_PaM9eY&m=PLPz-Ouf6_RerzE8b8nn3WeDsvx-rPMAz8kmBzfMBIk&s=PrJZa7Z_GnuKHxBlpD7EHKJMm2UbEarXv1hsnziRLyI&e=>
On Mar 8, 2021, at 5:12 AM, Vincent ROL <vincent.rol@asp-public.fr<mailto:vincent.rol@asp-public.fr>> wrote:
Hello,
We are a French public administration, the Service and Payment Agency (ASP).
We download the main.cvd, daily.cvd and bytecode.cvd files every day at 7:45 am.
As of 03/06/2021, we are getting the 403 Forbidden error.
We go through a proxy, and we present ourselves with the IP 217.109.233.245, can you unblock us please?
Best Regards.
<IMAGE.jpg>
2 rue du Maupas
87040 Limoges cedex 1
tel : 05 55 12 00 00
www.asp-public.fr<http://www.asp-public.fr/>
Soyons eco-responsables,
n imprimons nos courriels que si necessaire.
-------------------------------------------------------------------------------------------------------
Ce message peut contenir des INFORMATIONS CONFIDENTIELLES destinees a l'usage exclusif du destinataire. Si vous le recevez par erreur, merci de bien vouloir nous en avertir immediatement par telephone ou messagerie, de le detruire et de n'en divulguer le contenu a personne.
This message may contain CONFIDENTIAL INFORMATION intended only for use by the addressee. If you have received it by mistake, thank you for notifying us immediately by telephone or by e-mail, and please, delete it and do not deliver it to anyone else .
-------------------------------------------------------------------------------------------------------
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
***************** MESSAGE IMPORTANT *******************
*** La pièce jointe à ce courriel a été analysée ***
*** par un antivirus qui n'a rien détecté d'anormal. ***
*** Ceci étant, n'ouvrez pas de pièces jointes quand ***
*** vous ne connaissez pas l'expéditeur du courriel. ***
-------------------------------------------------------------------------------------------------------
Ce message peut contenir des INFORMATIONS CONFIDENTIELLES destinees a l'usage exclusif du destinataire. Si vous le recevez par erreur, merci de bien vouloir nous en avertir immediatement par telephone ou messagerie, de le detruire et de n'en divulguer le contenu a personne.
This message may contain CONFIDENTIAL INFORMATION intended only for use by the addressee. If you have received it by mistake, thank you for notifying us immediately by telephone or by e-mail, and please, delete it and do not deliver it to anyone else .
-------------------------------------------------------------------------------------------------------