[prev in list] [next in list] [prev in thread] [next in thread] 

List:       clamav-users
Subject:    Re: [clamav-users] Restriction of downloads
From:       "Joel Esler \(jesler\) via clamav-users" <clamav-users () lists ! clamav ! net>
Date:       2021-03-07 23:43:10
Message-ID: 1FFF788E-727B-4123-9C14-73608BF5E862 () cisco ! com
[Download RAW message or body]

[Attachment #2 (text/plain)]

Also, for those of you that have figured out a way to bypass the restriction, and \
yes, I can see you, I can tell what this looks like server side.  If people start \
abusing the system in this bypassed way, I'll have to lock it down farther, which I \
don't want to do. I am trying to find a middle ground right now, for anyone on the \
client side that has been paying attention to the downloads over the last couple \
days, you've seen it work then not work then work again.

Please use Freshclam.

Sent from my  iPhone

On Mar 6, 2021, at 19:33, Joel Esler (jesler) <jesler@cisco.com> wrote:

 ClamAV community-

I'm very sorry that it has come to where we are at with the current restrictions \
around downloading of virus definitions.

If you are receiving a 403 or a 1020 error when attempting to download, please use \
Freshclam, and make sure that version of Freshclam is not an eol'ed version. (You \
must be running something higher than 0.100). If you are fully up to date, and you \
are still receiving one of the above error codes, you're specifically blocked for \
abuse of the system, please feel free to write me with your external IP so I can \
guide you in the correct direction.

If you are receiving a 429 from your downloads, your downloading too fast and too \
much and you have hit the rate limit. If you don't think you are, please feel free to \
write me with your external IP so I can guide you in the correct direction.

If you are using Qnap, I believe the issue is, you're running an EOL version, please \
give Qnap feedback to update. They are about 4 years behind.

Again, I know this is a headache, but, unfortunately it has come to this.  I'm \
constantly experimenting with allowing more downloads to the system while restricting \
the abusers.  Unfortunately the majority of the abuse is in cloud service providers.  \
Amazon AWS, Azure, Google cloud computing and Oracle's hosting systems.

A few bad apples have ruined the basket and we've had to implement emergency \
measures.  We are working with Cloudflare as well, and already have updates to \
Freshclam planned. We are preparing a blog post and an updated download script to \
replace the one on the site, if you are unable to use freshclam.  (You should use \
Freshclam though, for real.)

I've been working on this problem for about three days straight, so please bear with \
me. Again, apologies for inconvenience.

—
Joel Esler
The guy putting in the time to try snd solve this
Sent from my  iPhone


[Attachment #3 (text/html)]

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
Also, for those of you that have figured out a way to bypass the restriction, and \
yes, I can see you, I can tell what this looks like server side. &nbsp;If people \
start abusing the system in this bypassed way, I'll have to lock it down farther, \
which I don't want  to do. I am trying to find a middle ground right now, for anyone \
on the client side that has been paying attention to the downloads over the last \
couple days, you've seen it work then not work then work again. &nbsp; <div><br>
</div>
<div>Please use Freshclam. &nbsp;<br>
<br>
<div dir="ltr">Sent from my&nbsp;<span style="background-color: rgba(255, 255, 255, \
0);">&nbsp;</span>iPhone</div> <div dir="ltr"><br>
<blockquote type="cite">On Mar 6, 2021, at 19:33, Joel Esler (jesler) \
&lt;jesler@cisco.com&gt; wrote:<br> <br>
</blockquote>
</div>
<blockquote type="cite">
<div dir="ltr"> ClamAV community-
<div><br>
</div>
<div>I'm very sorry that it has come to where we are at with the current restrictions \
around downloading of virus definitions. &nbsp;</div> <div><br>
</div>
<div>If you are receiving a <b>403</b> or a <b>1020</b> error when attempting to \
download, please use Freshclam, and make sure that version of Freshclam is not an \
eol'ed version. (You must be running something higher than 0.100). If you are fully \
up to date,  and you are still receiving one of the above error codes, you're \
specifically blocked for abuse of the system, please feel free to write me with your \
external IP so I can guide you in the correct direction.&nbsp;</div> <div><br>
</div>
<div>If you are receiving a <b>429</b> from your downloads, your downloading too fast \
and too much and you have hit the rate limit. If you don't think you are, please \
feel&nbsp;<span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">free to write \
me with your  external IP so I can guide you in the correct \
direction.&nbsp;</span></div> <div><font color="#000000"><span style="caret-color: \
rgb(0, 0, 0);"><br> </span></font></div>
<div><font color="#000000"><span style="caret-color: rgb(0, 0, 0);">If you are using \
Qnap, I believe the issue is, you're running an EOL version, please give Qnap \
feedback to update. They are about 4 years behind.&nbsp;</span></font></div> \
<div><font color="#000000"><span style="caret-color: rgb(0, 0, 0);"><br> \
</span></font></div> <div><font color="#000000"><span style="caret-color: rgb(0, 0, \
0);">Again, I know this is a headache, but, unfortunately it has come to this. \
&nbsp;I'm constantly experimenting with allowing more downloads to the system while \
restricting the abusers. &nbsp;Unfortunately  the majority of the abuse is in cloud \
service providers. &nbsp;Amazon AWS, Azure, Google cloud computing and Oracle's \
hosting systems. &nbsp;</span></font></div> <div><font color="#000000"><span \
style="caret-color: rgb(0, 0, 0);"><br> </span></font></div>
<div><font color="#000000"><span style="caret-color: rgb(0, 0, 0);">A few bad apples \
have ruined the basket and we've had to implement emergency measures. &nbsp;We are \
working with Cloudflare as well, and already have updates to Freshclam \
planned.&nbsp;</span></font><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, \
0);">We  are preparing a blog post and an updated download script to replace the one \
on the site, if you are unable to use freshclam. &nbsp;(You should use Freshclam \
though, for real.)</span></div> <div><font color="#000000"><span style="caret-color: \
rgb(0, 0, 0);"><br> </span></font></div>
<div><font color="#000000"><span style="caret-color: rgb(0, 0, 0);">I've been working \
on this problem for about three days straight, so please bear with me. Again, \
apologies for inconvenience.&nbsp;</span></font></div> <div><br>
</div>
<div>—</div>
<div>Joel Esler</div>
<div>The guy putting in the time to try snd solve this</div>
<div>
<div dir="ltr">Sent from my&nbsp;<span style="background-color: rgba(255, 255, 255, \
0);">&nbsp;</span>iPhone</div> </div>
</div>
</blockquote>
</div>
</body>
</html>



_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

--===============6930212173275797190==--

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic