| Main Archive Page > Month Archives > clamav-users archives |
Re: [Clamav-users] Update problem on daily.cld
From: Adam Stephens <adam.stephens_at_nospam>Date: Thu Apr 29 2010 - 14:06:54 GMT
To: ClamAV users ML <clamav-users@lists.clamav.net>
aCaB wrote:
> Adam Stephens wrote:
>
>> I'm seeing a similar problem, and I believe it's another issue caused by
>> ClamAV's aggressive policy of disabling older software versions. If I
>> run freshclam with debug options I see errors like this:
>>
>
> As stated multiple times "ClamAV's aggressive policy of disabling older
> software versions" has got nothing to do with what mirrors do. In fact,
> as stated multiple times, the clamav project has got no control over the
> mirrors nor their admins which are left completely free to make use of
> THEIR bandwith as THEY prefer. Banning old version is THEIR option as is
> THEIR choice to serve older clients.
>
That error doesn't come from the mirrors; it comes from freshclam - the
message is in manager.c, and it's triggered by this check in mirman.c:
if(mdat->dbflevel && (mdat->dbflevel > flevel) &&
(mdat->dbflevel - flevel > 3))
if(time(NULL) - mdat->mirtab[i].atime < (mdat->dbflevel
- flevel) * 3600)
return 2;
ClamAV's website says:
"Starting from ClamAV 0.9x, whenever your ClamAV engine becomes outdated
and the difference between the functionality level required by the CVD
and the functionality level supported by your ClamAV engine is more than
3, freshclam refuses to check for updates more often than 6 times per day"
The recommended functionality level is 51, and the functionality level
of 0.95.3 is 44 - so I think that code restricts 0.95.3 users to
checking a mirror once every 7 hours.
>
>> If you're running an OS that hasn't packaged 0.96 yet, I think you now
>> need to build ClamAV from source if you want timely signature updates.
>> The odd thing is the ClamAV website still recommends using the Debian
>> Volatile packages.
>>
>
> Right. Because, as everybody knows, the clamav guys maintain Debian and
> have control over volatile...
> ...and world hunger must be the clamav folks fault as well.
>
>
>
That's not what I said, is it? I said if your OS hasn't packaged 0.96
yet, you need to compile from source to get timely updates. And I
mentioned that the ClamAV site tells people to install the package from
Debian volatile (although that page also mentions sarge & etch, so it
clearly hasn't been updated in a while).
> Anyway, that being said (for the milionth time), feel free to keep
> complaining about free services and people behind them as much as you
> like.
I appreciate the some people are a bit twitchy after the furore
disabling 0.94 caused, but I've not complained about ClamAV or the
developers. All I've done is told a user requesting help what I believe
their problem is and how to fix it.
> This thread is dead for me.
>
I'm delighted to hear it. Your contribution to date has been
ill-informed, rude, and completely unhelpful.
regards,
Adam Stephens.
-- -------------------------------- Adam Stephens Network Specialist - Email & DNS adam.stephens@bristol.ac.uk _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml