ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Updates blocked by cloudflare - how to proceed?
mabra


Joined: 25 Apr 2014
Posts: 19
Reply with quote
Hi All!

Suddenly, I found all my auto updates are failing, but dont
know, when this starts. I followed the link in the essage, which
sends the browser to:
http://database.clamav.net/main.cvd
but I am getting an strange message in that page:

Quote:
Error 1006
Ray ID: 47028c0a43debebc 2018-10-27 04:51:21 UTC
Access denied
What happened?
The owner of this website (database.clamav.net) has banned your IP address (num.num.num.num).


BTW, this is the address, you'll fid in this web, as the link to the dailys too.

How can I proceed?

Thanks,
Manfred
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4569
Location: USA
Reply with quote
Any idea what started this off? Did you make any changes to your system that might be responsible for it? If so, you will need to do some configuration to some software to allow ClamWin to auto update.

Can you update ClamWin manually? If so, that might tell you something. If you can--maybe a firewall/other security product prevents ClamWin autoupdates and needs to be configured to allow it.

You can go to http://www.clamav.net/downloads on the web and access the Clam AV databases (main/daily/bytecode) to download them manually outside of ClamWin.

Let us know how it goes.

Thanks for using ClamWin!

Regards,
View user's profileSend private message
mabra


Joined: 25 Apr 2014
Posts: 19
Reply with quote
Hello!

I've written exactly the message, I've got, when I followed the link.
Quote:
You can go to http://www.clamav.net/downloads on the web and access the Clam AV databases (main/daily/bytecode) to download them manually outside of ClamWin.

I just tried it again this moment and I am blocked as before and as I initially wrote.

For this reason, manual updates are failling too.

As a workaround, I deleted the database and visited the page via the
tor-network and downloaded the datase manually.
This is nothing which clamav can do, becuase it does not "talk" sock5.

There where no changes to firewall or at least, something, that I remember.
I even just temporarely monitored the destionation via tcpdump and at least
for the last hour, there where no activity to the addresses, just rare attempts
to update.

I do not know, whome to contact.

Thanks,
Manfred
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4569
Location: USA
Reply with quote
First, contact Clam Av via contact information at their official web site to see if they do block certain ISPs from downloading their signatures. Tell them your ISP and see if it is blocked.

Then scan your computer with a real-time Av. Follow that with a scan by Malwarebytes Free.

Then get into Safe Mode and repeat the scans.

Let us know how it goes.

Regards,
View user's profileSend private message
mabra


Joined: 25 Apr 2014
Posts: 19
Reply with quote
Hello!

GuitarBob wrote:
First, contact Clam Av via contact information at their official web site to see if they do block certain ISPs from downloading their signatures. Tell them your ISP and see if it is blocked.

Then scan your computer with a real-time Av. Follow that with a scan by Malwarebytes Free.

Then get into Safe Mode and repeat the scans.

Let us know how it goes.

Regards,


I have no ideo, how to contact someone there, because their website blocks me!
>http://www.manfbraun.de/cont/misc/TempImages/2018-10-27--clamav-downloads-blocked--Capture--pc75.png<
According to my current virusscanners (clam av, with manually loaded patterns and to MacAfee) my
computer is virus-free and there is no traffice to cloudflare or clamav which would explain
the blocking!
I provided an image from my website - but this is not displayed here (probably,
because this website does not has httpS until now) - so I am showing the path ...

A mailaddress for clamav would be probably a chance.

Thanks,
Manfred


Last edited by mabra on Tue Nov 13, 2018 4:06 pm; edited 1 time in total
View user's profileSend private message
mabra


Joined: 25 Apr 2014
Posts: 19
Reply with quote
Hi !

Another good thing would be clamav database download to use
a sock5 proxy, which could use transport tor - so one would have
another ip-address for each request.
I tried it, but it does not work.

Regards,
Manfred
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4569
Location: USA
Reply with quote
I got this address from their web site: clamav-site@cisco.com which is the address for the Clam AV web team. Try to contact them and see if they can help.

Regards,
View user's profileSend private message
mabra


Joined: 25 Apr 2014
Posts: 19
Reply with quote
GuitarBob wrote:
I got this address from their web site: clamav-site@cisco.com which is the address for the Clam AV web team. Try to contact them and see if they can help.

Regards,

Yes, thanks - saw this and asked them already.
Just another thing is to look, if there are blockings for my ip-address,
thats on my plan at least.

Regards,
Manfred
View user's profileSend private message
Updates blocked by cloudflare - how to proceed?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic