[prev in list] [next in list] [prev in thread] [next in thread]
List: clamav-users
Subject: Re: [clamav-users] Restriction of downloads
From: "Joel Esler \(jesler\) via clamav-users" <clamav-users () lists ! clamav ! net>
Date: 2021-03-07 23:43:10
Message-ID: 1FFF788E-727B-4123-9C14-73608BF5E862 () cisco ! com
[Download RAW message or body]
[Attachment #2 (text/plain)]
Also, for those of you that have figured out a way to bypass the restriction, and \
yes, I can see you, I can tell what this looks like server side. If people start \
abusing the system in this bypassed way, I'll have to lock it down farther, which I \
don't want to do. I am trying to find a middle ground right now, for anyone on the \
client side that has been paying attention to the downloads over the last couple \
days, you've seen it work then not work then work again.
Please use Freshclam.
Sent from my iPhone
On Mar 6, 2021, at 19:33, Joel Esler (jesler) <jesler@cisco.com> wrote:
ClamAV community-
I'm very sorry that it has come to where we are at with the current restrictions \
around downloading of virus definitions.
If you are receiving a 403 or a 1020 error when attempting to download, please use \
Freshclam, and make sure that version of Freshclam is not an eol'ed version. (You \
must be running something higher than 0.100). If you are fully up to date, and you \
are still receiving one of the above error codes, you're specifically blocked for \
abuse of the system, please feel free to write me with your external IP so I can \
guide you in the correct direction.
If you are receiving a 429 from your downloads, your downloading too fast and too \
much and you have hit the rate limit. If you don't think you are, please feel free to \
write me with your external IP so I can guide you in the correct direction.
If you are using Qnap, I believe the issue is, you're running an EOL version, please \
give Qnap feedback to update. They are about 4 years behind.
Again, I know this is a headache, but, unfortunately it has come to this. I'm \
constantly experimenting with allowing more downloads to the system while restricting \
the abusers. Unfortunately the majority of the abuse is in cloud service providers. \
Amazon AWS, Azure, Google cloud computing and Oracle's hosting systems.
A few bad apples have ruined the basket and we've had to implement emergency \
measures. We are working with Cloudflare as well, and already have updates to \
Freshclam planned. We are preparing a blog post and an updated download script to \
replace the one on the site, if you are unable to use freshclam. (You should use \
Freshclam though, for real.)
I've been working on this problem for about three days straight, so please bear with \
me. Again, apologies for inconvenience.
—
Joel Esler
The guy putting in the time to try snd solve this
Sent from my iPhone
[Attachment #3 (text/html)]
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
Also, for those of you that have figured out a way to bypass the restriction, and \
yes, I can see you, I can tell what this looks like server side. If people \
start abusing the system in this bypassed way, I'll have to lock it down farther, \
which I don't want to do. I am trying to find a middle ground right now, for anyone \
on the client side that has been paying attention to the downloads over the last \
couple days, you've seen it work then not work then work again. <div><br>
</div>
<div>Please use Freshclam. <br>
<br>
<div dir="ltr">Sent from my <span style="background-color: rgba(255, 255, 255, \
0);"> </span>iPhone</div> <div dir="ltr"><br>
<blockquote type="cite">On Mar 6, 2021, at 19:33, Joel Esler (jesler) \
<jesler@cisco.com> wrote:<br> <br>
</blockquote>
</div>
<blockquote type="cite">
<div dir="ltr"> ClamAV community-
<div><br>
</div>
<div>I'm very sorry that it has come to where we are at with the current restrictions \
around downloading of virus definitions. </div> <div><br>
</div>
<div>If you are receiving a <b>403</b> or a <b>1020</b> error when attempting to \
download, please use Freshclam, and make sure that version of Freshclam is not an \
eol'ed version. (You must be running something higher than 0.100). If you are fully \
up to date, and you are still receiving one of the above error codes, you're \
specifically blocked for abuse of the system, please feel free to write me with your \
external IP so I can guide you in the correct direction. </div> <div><br>
</div>
<div>If you are receiving a <b>429</b> from your downloads, your downloading too fast \
and too much and you have hit the rate limit. If you don't think you are, please \
feel <span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">free to write \
me with your external IP so I can guide you in the correct \
direction. </span></div> <div><font color="#000000"><span style="caret-color: \
rgb(0, 0, 0);"><br> </span></font></div>
<div><font color="#000000"><span style="caret-color: rgb(0, 0, 0);">If you are using \
Qnap, I believe the issue is, you're running an EOL version, please give Qnap \
feedback to update. They are about 4 years behind. </span></font></div> \
<div><font color="#000000"><span style="caret-color: rgb(0, 0, 0);"><br> \
</span></font></div> <div><font color="#000000"><span style="caret-color: rgb(0, 0, \
0);">Again, I know this is a headache, but, unfortunately it has come to this. \
I'm constantly experimenting with allowing more downloads to the system while \
restricting the abusers. Unfortunately the majority of the abuse is in cloud \
service providers. Amazon AWS, Azure, Google cloud computing and Oracle's \
hosting systems. </span></font></div> <div><font color="#000000"><span \
style="caret-color: rgb(0, 0, 0);"><br> </span></font></div>
<div><font color="#000000"><span style="caret-color: rgb(0, 0, 0);">A few bad apples \
have ruined the basket and we've had to implement emergency measures. We are \
working with Cloudflare as well, and already have updates to Freshclam \
planned. </span></font><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, \
0);">We are preparing a blog post and an updated download script to replace the one \
on the site, if you are unable to use freshclam. (You should use Freshclam \
though, for real.)</span></div> <div><font color="#000000"><span style="caret-color: \
rgb(0, 0, 0);"><br> </span></font></div>
<div><font color="#000000"><span style="caret-color: rgb(0, 0, 0);">I've been working \
on this problem for about three days straight, so please bear with me. Again, \
apologies for inconvenience. </span></font></div> <div><br>
</div>
<div>—</div>
<div>Joel Esler</div>
<div>The guy putting in the time to try snd solve this</div>
<div>
<div dir="ltr">Sent from my <span style="background-color: rgba(255, 255, 255, \
0);"> </span>iPhone</div> </div>
</div>
</blockquote>
</div>
</body>
</html>
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
--===============6930212173275797190==--
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic