Török Edwin wrote:

Could you please point out where in this log extract it mentions
anything about the software getting remotely turned off ?

Received signal: wake up
ClamAV update process started at Fri Apr 16 10:26:14 2010
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.95.3 Recommended version: 0.96
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cvd is up to date (version: 52, sigs: 704727, f-level: 44,
builder: sven)
daily.cvd is up to date (version: 10751, sigs: 52057, f-level: 51,
builder: guitar)


If you manually start clamscan/clamd it shows this message:

LibClamAV Warning: ***********************************************************
LibClamAV Warning: ***  This version of the ClamAV engine is outdated.    ***
LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/support/faq ***
LibClamAV Warning: ***********************************************************
LibClamAV Error: cli_hex2str(): Malformed hexstring: This ClamAV version has reached End of Life! Please upgrade to version 0.95 or later. For more information see www.clamav.net/eol-clamav-094 and www.clamav.net/download (length: 169)
LibClamAV Error: Problem parsing database at line 742
LibClamAV Error: Can't load /tmp/clamav-87fcebeda696335ed02c4a74df419b38/daily.ndb: Malformed database
LibClamAV Error: Can't load /usr/share/clamav/daily.cvd: Malformed database
ERROR: Malformed database

No, that's what it says NOW, **AFTER** it's borked the server.

Where in that log message I quoted above does it say that at any point in the future is will be turned off ? I've had no reason to run freshclam manually on that server in the last 6 months, for several years in fact. That demonstrates the quality of the code/project prior to this issue.

 > That log message links to http://www.clamav.net/support/faq

You are right, the FAQ should link to the EOL message.


Could you please point out where on that page it mentions anything about
the problem ?

www.clamav.net
IMPORTANT ANNOUNCEMENT (red)

That is **NOT** on the page referenced.


I hope that by now you may be realising that many people quite legitimately did not know anything until things broke this morning. We did not have 6 months notice - our servers "just broke".



Aecio F. Neto wrote:

I use clamav, I think it is great and I recommend it to all my customers.

I agree.

Even though, I do not agree with fact that a vendor (open source or not)
disable and break services on my endpoint.
There are many other ways to do it and this is bad for the endpoint and for
the vendor.

Team should review this practice, no matter if they announce it earlier or
not.

Ditto.


Today I've gone from having a server that "just runs" and has run with virtually no oversight for several years to one that "just broke".

I had to disable AV scanning this morning in order to get the mail moving, now I've disabled freshclam and rolled back the database to yesterdays version.

Luckily it's not been a busy day today !

--
Simon Hobson

Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed
author Gladys Hobson. Novels - poetry - short stories - ideal as
Christmas stocking fillers. Some available as e-books.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to