For far too long I feel like, we’re throwing band-aids on things in order to “just get them up”
I, and I am sure, all of you, don’t want band-aids, you want reliable solutions that are better in the long run and robust. Sometimes, unfortunately, that takes longer to design, code, and roll out. For instance, on our backend, the system that collects the actual malware samples, stores them, de-duplicates them, deals with the collection, signatures, package distribution, etc, went from collection, on average, 300k samples a day (unique, after de-duplication), to now just shy of 1M a day. As you can imagine this introduces all sorts of interesting issues, aside from the simplest thing of just plain storage. So this system had to be completely redesigned. The website (ClamAV.net<http://ClamAV.net>) had to be redesigned. ClamAV, the actual code, has had a ton of work done on it, not only to fix bugs and issues, but to introduce new features. All the while with an increasing user base of several thousand users per day. So, we’re working to make everything a better experience, and I know it’s painful right now, and we apologize for it, but hopefully the light at the end of the tunnel will make it all worth it. It’s costing us millions of dollars, but we’re going to do it, and we’re going to do it right. -- Joel Esler Open Source Manager Threat Intelligence Team Lead Talos On Sep 11, 2014, at 5:39 PM, Gene Heskett <ghesk...@wdtv.com<mailto:ghesk...@wdtv.com>> wrote: On Thursday 11 September 2014 16:25:27 Joel Esler (jesler) did opine And Gene did reply: On Sep 11, 2014, at 7:15 AM, Gene Heskett <ghesk...@wdtv.com<mailto:ghesk...@wdtv.com><mailto:ghesk...@wdtv.com>> wrote: On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine And Gene did reply: Den 2014-09-11 09:59, Al Varnell skrev: On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote: I always get these warnings and it is always ip 192.121.13.5 Any way to avoid these warnings? That mirror appear to be located in Sweden. Depending on where in the world you are located, you _might_ see improvement by changing the following in freshclam.conf: Yes I live in Sweden, has tried with Database Mirror db.se.clamav.net<http://db.se.clamav.net><http://db.se.clamav.net> and it gets the same results. Always the same server that gives error, maybe not available anymore. Question for ClamAVآ® team. Have you done away with the Mirror Status page? (was http://www.clamav.net/mirrors.html) I used it quite often to troubleshoot issues such as this one. I get error 404 for this page http://www.clamav.net/mirrors.html perhaps also not available anymore. Thanks Al for your answers! I also am getting a 404, but the rotating red devils head graphic is a new image to me. Since its a giant version of the same image at http://www.clamav.net/contact.html#ml, I have to assume that the mirrors.html file is missing from the clamav.net<http://clamav.net/><http://clamav.net<http://clamav.net/>> server. Well, it doesn’t exist on the new server. I just answered this in another thread as well, but this page (and the stats page) weren’t ready for the new site yet. We’re still working in it. It looks to me as if the left hand is not communicating with the right hand, and is systematically trying to destroy clamav. We expect that from M$, but your new management does not seem to be on the same page as its users have been for years. I don’t think there is anyone “systematically trying to destroy clamavâ€, and take issue with that statement. What can I do better to communicate to you? My statistics on usage and downloads don’t illustrate what you are complaining about, so what can I do to make it better for you? I am not currently, and haven't for about a year, had a problem with freshclam. My comment is based as much on the repeat nature of this particular problem as its reported here on this list. But there is also something else to consider, and that is the overflow in the BGP in the master network dns servers. I cannot, and have not been able to access the www.uspo.gov<http://www.uspo.gov/> site for several days as the dns servers I get from my cable provider are suffering from this same overflow condition, so the site does not exist. So I can't "traceroute" a package thru the USPO In case you're not aware of that problem, here is a link to the source of the story on zdnet. <http://www.zdnet.com/internet-hiccups-today-youre-not-alone-heres- why-7000032566/> -- Joel Esler Open Source Manager Threat Intelligence Team Lead Talos _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml Cheers, Gene Heskett -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) Genes Web page <http://geneslinuxbox.net:6309/gene> US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
