Mailing List ecs-isp@2rosenthals.com Archived Message #1283

From: "Massimo S." <ecs-isp@2rosenthals.com> Full Headers
Undecoded message
Subject: Re: [eCS-ISP] ClamAV 0.103.10 out-of-date
Date: Sat, 15 Nov 2025 11:18:28 +0100
To: eCS ISP Mailing List <ecs-isp@2rosenthals.com>

Il 11/11/2025 00:27, Steven Levine ha scritto:
In <list-14840136@2rosenthals.com>, on 11/10/25
    at 02:27 PM, "Massimo S." <ecs-isp@2rosenthals.com> said:

Hi Massimo,

you should see several patches for clamav-0.103.12. Some are security
fixes (that you should apply, too),

Should?  Did you mean to say you would really appreciate it if Paul try to
apply some of these patches for you?

but the impersonate-user-agent one in
particular will have freshclam fake its user-agent to re-enable signature
updates.

Offhand this one looks like it should work.

What you need to do first is verify that the HTTPUserAgent keyword works
for our port if you put it into your freshclam.conf.  See

   https://linux.die.net/man/5/freshclam.conf

What should happen with the current code is that freshclam will refuse to
honor the request since you are attempting to download from clamav.net.
If this happens, it's likely that the patch will allow the download to
happen.

hi all,

modifying the HTTPUSerAgent (HTTPUserAgent FreshClam/1.0.9) do not work:

In an effort to reduce CDN data costs, HTTPUserAgent may not be used when updating from clamav.net.
The HTTPUserAgent specified in your config will be ignored so that FreshClam is not blocked by the CDN.
If ClamAV's user agent is not allowed through your firewall/proxy, please contact your network administrator.

Sat Nov 15 11:11:41 2025 -> *Loaded freshclam.dat:
Sat Nov 15 11:11:41 2025 -> *  version:    1
Sat Nov 15 11:11:41 2025 -> *  uuid:       1713e616-98c2-4080-86b1-a7069c454ff9
Sat Nov 15 11:11:41 2025 -> *  retry-after: 2025-11-16 01:00:12
Sat Nov 15 11:11:41 2025 -> ClamAV update process started at Sat Nov 15 11:11:41 2025
Sat Nov 15 11:11:41 2025 -> *Current working dir is
Sat Nov 15 11:11:41 2025 -> *Querying current.cvd.clamav.net
Sat Nov 15 11:11:42 2025 -> *TTL: 1800
Sat Nov 15 11:11:42 2025 -> *fc_dns_query_update_info: Software version from DNS: 1.0.9
Sat Nov 15 11:11:42 2025 -> ^Your ClamAV installation is OUTDATED!
Sat Nov 15 11:11:42 2025 -> ^Local version: 0.103.10 Recommended version: 1.0.9
Sat Nov 15 11:11:42 2025 -> DON'T PANIC! Read https://docs.clamav.net/manual/Installing.html
Sat Nov 15 11:11:42 2025 -> ^FreshClam previously received error code 429 or 403 from the ClamAV Content Delivery Network (CDN).
Sat Nov 15 11:11:42 2025 -> This means that you have been rate limited or blocked by the CDN.
Sat Nov 15 11:11:42 2025 ->  1. Verify that you're running a supported ClamAV version.
Sat Nov 15 11:11:42 2025 ->     See https://docs.clamav.net/faq/faq-eol.html for details.
Sat Nov 15 11:11:42 2025 ->  2. Run FreshClam no more than once an hour to check for updates.
Sat Nov 15 11:11:42 2025 ->     FreshClam should check DNS first to see if an update is needed.
Sat Nov 15 11:11:42 2025 ->  3. If you have more than 10 hosts on your network attempting to download,
Sat Nov 15 11:11:42 2025 ->     it is recommended that you set up a private mirror on your network using
Sat Nov 15 11:11:42 2025 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Sat Nov 15 11:11:42 2025 ->     CDN and your own network.
Sat Nov 15 11:11:42 2025 ->  4. Please do not open a ticket asking for an exemption from the rate limit,
Sat Nov 15 11:11:42 2025 ->     it will not be granted.
Sat Nov 15 11:11:42 2025 -> ^You are still on cool-down until after: 2025-11-16 01:00:12


massimo

Subscribe: Feed, Digest, Index.
Unsubscribe
Mail to ListMaster