From: "Massimo S." Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTP id 14830642 for ecs-isp@2rosenthals.com; Sun, 09 Nov 2025 10:33:30 -0500 Received: from secmgr-va.2rosenthals.com ([50.73.8.217]:53775 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1vI7Pv-000000002FG-0gMC for ecs-isp@2rosenthals.com; Sun, 09 Nov 2025 10:33:24 -0500 Received: from mail2.quasarbbs.net ([80.86.52.115]:10066) by mail2.2rosenthals.com with esmtp (Exim 4.98.2) (envelope-from ) id 1vI7Pr-000000004sG-1H8X for ecs-isp@2rosenthals.com; Sun, 09 Nov 2025 10:33:21 -0500 X-SASI-Hits: BODY_SIZE_3000_3999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_7BIT 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, LEGITIMATE_SIGNS 0.000000, MSGID_SAMEAS_FROM_HEX_844412 0.100000, MSG_THREAD 0.000000, REFERENCES 0.000000, REPLYTO_SAMEAS_FROM 0.000000, SENDER_NO_AUTH 0.000000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, URI_ENDS_IN_HTML 0.000000, USER_AGENT 0.000000, __ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __COURIER_PHRASE 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_COMMON 0.000000, __FRAUD_REPLY 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_REPLYTO 0.000000, __HEADER_ORDER_FROM 0.000000, __HTTPS_URI 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __IOC_PHRASE 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __MULTIPLE_URI_TEXT 0.000000, __NO_HTML_TAG_RAW 0.000000, __REFERENCES 0.000000, __REPLYTO_SAMEAS_FROM_ACC 0.000000, __REPLYTO_SAMEAS_FROM_ADDY 0.000000, __REPLYTO_SAMEAS_FROM_DOMAIN 0.000000, __RUS_OBFU_PHONE 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_ENDS_IN_SLASH 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __URI_WITH_PATH 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.11.9.145719 X-SASI-Hits: BODY_SIZE_3000_3999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_7BIT 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, LEGITIMATE_SIGNS 0.000000, MSGID_SAMEAS_FROM_HEX_844412 0.100000, MSG_THREAD 0.000000, REFERENCES 0.000000, REPLYTO_SAMEAS_FROM 0.000000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, URI_ENDS_IN_HTML 0.000000, USER_AGENT 0.000000, __ANY_URI 0.000000, __AUTH_RES_PASS 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __COURIER_PHRASE 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_COMMON 0.000000, __FRAUD_REPLY 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_REPLYTO 0.000000, __HEADER_ORDER_FROM 0.000000, __HTTPS_URI 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __IOC_PHRASE 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __MULTIPLE_URI_TEXT 0.000000, __NO_HTML_TAG_RAW 0.000000, __REFERENCES 0.000000, __REPLYTO_SAMEAS_FROM_ACC 0.000000, __REPLYTO_SAMEAS_FROM_ADDY 0.000000, __REPLYTO_SAMEAS_FROM_DOMAIN 0.000000, __RUS_OBFU_PHONE 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_ENDS_IN_SLASH 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __URI_WITH_PATH 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.11.9.145719 DKIM-Signature: v=1; q=dns/txt; a=rsa-sha256; c=relaxed/relaxed; s=default; d=ecomstation.it; bh=8i8MlWcCsYTmJkBx+gnQu0LIz/PPABTz7cXycThgC/8=; h=Return-Path:From:To:Subject:Date:Message-ID; b=T8bEQkfJoogl9WccwtIgmhwBuyrxFJmfLXCu1YE4UI38cu3SgqgUFCwCgwpjwLSt9iAGF LMUq9ROMW03sbcz2x5V/kZ9tksQT4SLtpfNJOgabcarc7XNjbk3xDDXntGlcPA0JxSw2GVZ IkmB5b3Jw4kCQ2UDN2gmGqkcPRIDhQlRGCx9k5Z7buL1fmj/hdYRf5ftlYl8yXiHGqVCyRm Y35JydK3+ChqhQxH5kvbfQpvneMpXtl1usAQVm8B8O+oED1Adh5Ydto7GJyZ4YOXzf1t5gs SIA/1wGQLDLhcmDwEQBjNIQPbAiBna3gWfFxAGfSp3FDiyEPElfNVqQkDrMw== Received: from [192.168.10.199] (dtp [192.168.10.199]) by srv2 (Weasel v3.092) for ; Sun, 09 Nov 2025 16:33:14 -0000 Reply-To: ml@ecomstation.it Subject: Re: [eCS-ISP] ClamAV 0.103.10 out-of-date To: eCS ISP Mailing List References: Organization: Massimo S. Message-ID: Date: Sun, 9 Nov 2025 16:33:08 +0100 User-Agent: Mozilla/5.0 (OS/2; U; Warp 4.5; it-IT; rv:1.7.13) Gecko/20060424 Thunderbird/1.0.8 Mnenhy/0.7.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=iso-8859-15; format=flowed Content-Language: it Content-Transfer-Encoding: 7bit Il 09/11/2025 00:38, Steven Levine ha scritto: > In , on 11/09/25 > at 06:32 AM, "Paul Smedley" said: > > Hi all, > >> Que Sera.... As I mentioned years ago - 0.103.x is the last version that >> doesn't use rust code. It is what it is.... > > While it is theoretically possible to build a modified version of 0.103.10 > that could download the 1.0.9 database files, there's no way to know if > your 0.103.10 could load and use them. > > In addition, the log messages you posted do not match what's in the code. > Without a full, unedited set of log files for the failed download > attempts, there's no way to guess if it's even worth the effort to think > about implementing a modified version. > > Steven Hi, maybe we can try to send to the repository a "fake" version, so that it will go on downloading signatures. Only after that we will see in clamscan still work. full log: -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- ftp.uni-stuttgart.de Official mirror server of the University of Stuttgart Contact: ftpmaster@ftp.uni-stuttgart.de Services: https, http, rsync -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- ##################################################### Welcome to Sanesecurity mirror for Clamav signatures. Service brough you www.virusfree.cz, all activity is logged and evaluated. Abuse of the service will result in permanent ban and legal prosecution. Feel free to contact us at support@virusfree.cz #################################################### Sun Nov 9 01:00:04 2025 -> *Current working dir is d:/usr/local/clamav/share/clamav/ Sun Nov 9 01:00:04 2025 -> *Loaded freshclam.dat: Sun Nov 9 01:00:04 2025 -> * version: 1 Sun Nov 9 01:00:04 2025 -> * uuid: 1713e616-98c2-4080-86b1-a7069c454ff9 Sun Nov 9 01:00:04 2025 -> * retry-after: 2025-11-09 01:00:13 Sun Nov 9 01:00:04 2025 -> ClamAV update process started at Sun Nov 9 01:00:04 2025 Sun Nov 9 01:00:04 2025 -> *Current working dir is d:/usr/local/clamav/share/clamav/ Sun Nov 9 01:00:04 2025 -> *Querying current.cvd.clamav.net Sun Nov 9 01:00:06 2025 -> *TTL: 1800 Sun Nov 9 01:00:06 2025 -> *fc_dns_query_update_info: Software version from DNS: 1.0.9 Sun Nov 9 01:00:06 2025 -> ^Your ClamAV installation is OUTDATED! Sun Nov 9 01:00:06 2025 -> ^Local version: 0.103.10 Recommended version: 1.0.9 Sun Nov 9 01:00:06 2025 -> DON'T PANIC! Read https://docs.clamav.net/manual/Installing.html Sun Nov 9 01:00:06 2025 -> ^FreshClam previously received error code 429 or 403 from the ClamAV Content Delivery Network (CDN). Sun Nov 9 01:00:06 2025 -> This means that you have been rate limited or blocked by the CDN. Sun Nov 9 01:00:06 2025 -> 1. Verify that you're running a supported ClamAV version. Sun Nov 9 01:00:06 2025 -> See https://docs.clamav.net/faq/faq-eol.html for details. Sun Nov 9 01:00:06 2025 -> 2. Run FreshClam no more than once an hour to check for updates. Sun Nov 9 01:00:06 2025 -> FreshClam should check DNS first to see if an update is needed. Sun Nov 9 01:00:06 2025 -> 3. If you have more than 10 hosts on your network attempting to download, Sun Nov 9 01:00:06 2025 -> it is recommended that you set up a private mirror on your network using Sun Nov 9 01:00:06 2025 -> cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the Sun Nov 9 01:00:06 2025 -> CDN and your own network. Sun Nov 9 01:00:06 2025 -> 4. Please do not open a ticket asking for an exemption from the rate limit, Sun Nov 9 01:00:06 2025 -> it will not be granted. Sun Nov 9 01:00:06 2025 -> ^You are still on cool-down until after: 2025-11-09 01:00:13 Sun Nov 9 01:00:06 2025 -> ~[LibClamAV] cli_rmdirs: Can't locate d:/usr/local/clamav/share/clamav/tmp.abb3b93375: No such file or directory massimo