<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>Hello,</div>
<div><br>
</div>
<div>Understood- I will talk with the dev team tomorrow. Thanks for the update and concern with the mirrors, this is really good info.</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks,</div>
<div><br>
</div>
<div><br>
</div>
<div>Tom M</div>
<div>
<div id="MAC_OUTLOOK_SIGNATURE"></div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>clamav-binary <<a href="mailto:clamav-binary-bounces@lists.clamav.net">clamav-binary-bounces@lists.clamav.net</a>> on behalf of Heiko Richter <<a href="mailto:lists-clamav@heikorichter.name">lists-clamav@heikorichter.name</a>><br>
<span style="font-weight:bold">Reply-To: </span>ClamAV Binary package maintainers <<a href="mailto:clamav-binary@lists.clamav.net">clamav-binary@lists.clamav.net</a>><br>
<span style="font-weight:bold">Date: </span>Tuesday, January 23, 2018 at 8:53 PM<br>
<span style="font-weight:bold">To: </span>ClamAV Binary package maintainers <<a href="mailto:clamav-binary@lists.clamav.net">clamav-binary@lists.clamav.net</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [Clamav-binary] New ClamAV Package<br>
</div>
<div><br>
</div>
<span style="mso-bookmark:_MailOriginalBody">
<div>
<div>
<p>Am 24. Januar 2018 02:23:12 MEZ schrieb “Thomas McCourt (tmccourt)” <<a href="mailto:tmccourt@cisco.com">tmccourt@cisco.com</a>>:</p>
<blockquote>
<p>Hello,</p>
<p>Yeah, we understand that people might not read the email, blog posts etc. I will discuss more with the Clam-AV dev team tomorrow to make sure these scenarios are well thought out (I am sure they have, but a double check never hurt). Since the mirrors have
been a primary focus of myself, IF any mirrors are having issues with the switch- I will look into that mirror.</p>
</blockquote>
<p>Checking mirrors after the update is to late.</p>
<p>As blacklists are suggested by the mirroring howto and bandwith is still expensive it is to be expected that they are widely used. Furthermore ClamAV mirrors have quite excessive loads during normal operations so admins will definitely optimize regex evaluations
by shortning the regex and therby reducing the number of evaluations per client access.</p>
<p>Therefor someone should check <strong>all</strong> mirrors <strong>before</strong> moving to 0.100.x. Otherwise the traffic Spike could rise to ddos levels in busy regions.</p>
<p>Scripting that check in bash should be quite easy.....</p>
<blockquote>
<p>In the future, we want a 1.0.0 version to be, what do the kids call it these days? “The bee’s knees” of software releases for ClamAV. That isn’t to say, that it isn’t a possibility to move to that version instead. I will see what the ClamAV Dev team says
first.</p>
<p>Thank you,</p>
<p>Tom McCourt From: clamav-binary <<a href="mailto:clamav-binary-bounces@lists.clamav.net">clamav-binary-bounces@lists.clamav.net</a><<a href="mailto:clamav-binary-bounces@lists.clamav.net">clamav-binary-bounces@lists.clamav.net</a>>> on behalf of Heiko Richter
<<a href="mailto:lists-clamav@heikorichter.name">lists-clamav@heikorichter.name</a><<a href="mailto:lists-clamav@heikorichter.name">lists-clamav@heikorichter.name</a>>> Reply-To: ClamAV Binary package maintainers <<a href="mailto:clamav-binary@lists.clamav.net">clamav-binary@lists.clamav.net</a><<a href="mailto:clamav-binary@lists.clamav.net">clamav-binary@lists.clamav.net</a>>>
Date: Tuesday, January 23, 2018 at 6:40 PM To: ClamAV Binary package maintainers <<a href="mailto:clamav-binary@lists.clamav.net">clamav-binary@lists.clamav.net</a><<a href="mailto:clamav-binary@lists.clamav.net">clamav-binary@lists.clamav.net</a>>> Subject:
Re: [Clamav-binary] New ClamAV Package (fwd)</p>
<p>Hi,</p>
<p>when releasing 0.100.x please be aware that several mirror operators are blocking old outdated versions form their servers by regex's that might not accept a 0.100.x release.</p>
<p>You should expect some mirrors to use blacklists formed like this to minimize the number oft regex checks per request:</p>
<p>^clamav/0.0 ^clamav/0.1 ^clamav/0.2 ^clamav/0.3 ^clamav/0.4 ^clamav/0.5 ^clamav/0.6 ^clamav/0.7 ^clamav/0.8 ^clamav/0.90 ^clamav/0.91 ....</p>
<p>Going to 0.100.x will break those blacklists and – depending on how many (faulty) blacklists are out there – it could drasticly increase the traffic for those mirrors that are configured to accept Version 0.100.x.</p>
<p>I know many open source projects like to stay below 1.0 but being a mirror operator myself I expect my traffic to spike as soon as 0.100.x is released.</p>
<p>It might be prudent to discuss a 1.0.0 version. Alternatively somebody could check every mirror with a “clamav/0.100.0” useragent and contact all the operators whose servers answer with 403 directly – not everybody will read the list.</p>
<p>Heiko</p>
<p>Am 23. Januar 2018 19:25:53 MEZ schrieb “Joel Esler (jesler)” <<a href="mailto:jesler@cisco.com">jesler@cisco.com</a><<a href="mailto:jesler@cisco.com">jesler@cisco.com</a>>>: Something we have “considered”.</p>
<p>I can't type today.</p>
<p>— Joel Esler | Talos: Manager | <a href="mailto:jesler@cisco.com">jesler@cisco.com</a><<a href="mailto:jesler@cisco.com">jesler@cisco.com</a>></p>
<p>On Jan 23, 2018, at 1:23 PM, Joel Esler (jesler) <<a href="mailto:jesler@cisco.com">jesler@cisco.com</a><<a href="mailto:jesler@cisco.com">jesler@cisco.com</a>>> wrote:</p>
<p>On Jan 23, 2018, at 10:05 AM, Reinhard Max <<a href="mailto:max@suse.com">max@suse.com</a><<a href="mailto:max@suse.com">max@suse.com</a>>> wrote:</p>
<p>On Mon, 22 Jan 2018 at 23:49, Micah Snyder (micasnyd) wrote:</p>
<p>0.99.3 suffered of scope creep and included more than just security patches and urgent bugfixes. As such, I would like to re-target these features for an upcoming “0.100.0” version. We are presently investigating to validate that the “100” number will not
break other things that we’re aware of. If all is okay, we would immediately re-release 0.99.3-beta2 as 0.100.0-beta and continue to address the few remaining issues blocking us from the 0.100.0 release candidate and release.</p>
<p>Given how long ClamAV already exists and still has a zero in front of its version number, I wonder if it woudn't make more sense to just call this new release 1.0.0 instead of investigating whether three digits in the 2nd component would break anything.</p>
<p>cu Reinhard</p>
<p>That is also something we have considering. We want 1.0 to include a big functional update or change to warrant that number. When you move between major versions like that, there are entities which then have to go “recertify” the software. So we don't want
to make a big change like that without something major to add.</p>
<p>— Joel Esler Manager Open Source, Design, Web, and Education Talos Group <a href="https://u6680657.ct.sendgrid.net/wf/click?upn=gBws3HYKtNN9m2docLyuT3zsuce8yagj59KLPbnJQSr5UEi6hZCxvbyL2t2e2-2FbV19tjduEVZsFvCBAC-2BF-2FOZIpKWy79co3zLLeSHYXywd-2Bj6aF7IA-2BF1qA53ONId0LBRWLQD-2F0i3LPFWCB004MAINZz9iniPyWGhknX6De8ZeSSJueuZUD7-2FkvORhPmkAhak14bOjnZ5kRiYH7-2FvWdU-2BBXsEjsC-2BsrMWWs2B6XcNRuQUwNr-2F5LdbUYwjgRIP2H-2BLIb4flXFhA3EygmKdW3IubS6YNg6LsuvLvEgBk9pfMKOrPVXLQeCBFg4jZbonJVyFYg1jyHmmZ3NvIHFVC67wX5v7-2F013GBWPvmcu-2FWDm0hPjSkuAxDlL1BXgdsqiVP7J2PVbVLs4oqyMPIFEAX-2B8aAMTbJ4Cdh6gf3cbEGLQNgkG5-2FMc8mc8DbVLBF-2BmId-2Fx6hRcc2SZzXs224ql7wpFSjolWX2rJtny6v2voSEuIE7OK-2FGeySam4bxT-2BqRffCgI-2FAkJjs21hfkBySgBw457VROmhhDQ2EWloSZsGsdKuI-3D_fMs1dihup-2FJ8UQ41mhVMZ6XEmOHfb678Y4pxggcudF9SHOoIjnyQnK4-2FSpeeILB-2FE12QIIjBXkbupnYeUZsRv1BWl5oS5QaHu0JcrQnrJcfgdmA5bASYu0llH0623-2Fj-2Fl-2BXAQ46A-2BpISxtKCS2zvjlKpMRe1tNmx-2FGcTEuQw-2FsDyohwfHrG5LGzFnyMgdLLoNr28QQRuyidVXwOyFMiFF8Cj79AEHutPXC5EHIFq92A-3D">
http://www.talosintelligence.com<https://u6680657.ct.sendgrid.net/wf/click?upn=gBws3HYKtNN9m2docLyuT3zsuce8yagj59KLPbnJQSqo2MU7eXImzB4TSKRNH6K3_fMs1dihup-2FJ8UQ41mhVMZ6XEmOHfb678Y4pxggcudF8OKEUBEs88Pj2LTLQC3B3G40tGUCg6Bj3KYbXgNDOUhK9m3UANe0kp6l8fpsy-2FrVZJpVECOGFIqD-2FHDCQzPVA-2FNi8-2BX09CuTpU8kks3rMuVrsKwuULuelagZgEzpD3KtmCSmLFbC8Y0NNoVnAamKT7fOjAQ9-2FGNZGwc8lozu4bQOaDZyorAnwteJfAaHdYDrI-3D</a>>
<em>____________________________________________</em>_ <a href="https://u6680657.ct.sendgrid.net/wf/click?upn=fDDvNRuqgdsp67o4QpZdLIA5Na1S9TxHGomIUEPK0nTXYn56Ws2FlPc0eSbeWaLRw3YOUvaSA3LEPOMpiCnZemTe0J2M4Xapd-2B62UPEjl7K0rsQKVAjBSkI2NlCTGc7nskAXfKXq9WXr6iGZI2fqv674UyEspOYs1YqiyO5HIjMg2j5P8rBWLPSH4010OujxvWqVNPhVbayyHoWyDPKwB3frYN8hehlsTYhjjkJd0-2BgKGBcoCmv4y-2BzVv3LAuhspPkeT1Rpa1SQ5jl91Jdhlpu0tWiFKwRBj6TZSm-2Fr23i999GpA6SpxFs9KckCJWXwiZXyzj6stdVoqZstiKhM-2B7YsyS0N397t6itDA0N9j05Fp1Kn-2FkouTvsBZBtsTNveTtPUymeWFMvgZmz91uedzrTUMIcjFFvOgPjWkdAjRSTDN7OIXkvT6OSd8i4mTRkbc-2FFEYS0QkY-2Fzl2XIU21LzzDM1EgvWL8sgG4lAw8DKJdSM-2FpvMJVrdj5fgUw-2FcN3GkPsSuPP0GVuUZ4sU8PETam7HjP3cd-2BYvYovPd5VcoTqThLqjiRtMmsk73X6N5zAbCzWbBcYc7Xr8wJ6DM1WBnR6E9iuHW3XUWHUK2JkvD7Fo02LGDTfmlmVS6WBfJF5es0i69p139pu-2B-2BKu5loCKw4g-3D-3D_fMs1dihup-2FJ8UQ41mhVMZ6XEmOHfb678Y4pxggcudF9SHOoIjnyQnK4-2FSpeeILB-2FE12QIIjBXkbupnYeUZsRv19hlB4PIMeOM1HsnxvdhPCZNEwsjx0mUd2ULact6zgQ2qv-2Fu8WlF8-2FwTeo78-2BcKVQ63sNP7XqA4ZgkhyRo8SHLvD-2BaGtuOpAvkj0hoanASUzzOH7n71gjR83dtA9PYP4sdTaLQHnO0cOBeTcv3hnco-3D">
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-binary<https://u6680657.ct.sendgrid.net/wf/click?upn=fDDvNRuqgdsp67o4QpZdLIA5Na1S9TxHGomIUEPK0nTXYn56Ws2FlPc0eSbeWaLRw3YOUvaSA3LEPOMpiCnZeiM3efI3P06lhbUaBVOKypE-3D_fMs1dihup-2FJ8UQ41mhVMZ6XEmOHfb678Y4pxggcudF8OKEUBEs88Pj2LTLQC3B3G40tGUCg6Bj3KYbXgNDOUhGpefqC-2FnShQI9rrSkcCWJ-2FdR8g1dOOCpD8dPgJCxc1n-2BuujUwlPRg7ZssYfUq0-2FmerwMMyRKjxfJnnQEtR583U3RD5QkrHLq-2BDIo4USnf4kaYy-2F93gN6UTjYWfBYvuwfKSMWsVBXwIonCmm4Pc7FSo-3D</a>>
<a href="https://u6680657.ct.sendgrid.net/wf/click?upn=gBws3HYKtNN9m2docLyuT6vQ7z-2FvID3ITaQZfkKsPDogsJXZ2rwsF0e90JqqS05AeOu2YRd18M8md0mU1wIIQDZfqLAzoKjzaKq19uzy6R8HhBQBTWAdpms3Ir-2Ftvs5atR0su2nXCh5AltZhHo4T9trtJTv22NdLDxSmV4uURRm7d323OGwx75SMM-2FS-2FW9mLFMn0AbzIte4VhwtoyJhJUHXGwXnm23gf1mneYwdWNbiYrtC5FZUu9Ixhx99w8BOXU5AxRZJBo72Br6rXgSIkBj1DOaRq9K2b8oiKLrhMtJUso39mIY1oQeHjgG9L-2BV4zzO9QvReMuBu8uGbiPp7DIRwNLfxxEjk8JH98Fvji4orXYrDuOsHKMAgkuDVi5aR9iXjK-2Fz3kmf1309ykURHuYpLAomTzLZd8Oq96tJnhXAnpz0y354VX-2BckeWkuriqrlzLOxFtEbk-2BwhqBoLvG48csK9cX5iZzrzhArrhdTsKSyQccDMXm7WmBjkyxXybwpG6bIS7OY5x2Y4-2FEozHIXgFMc-2FdOltDDy7acG-2FLYBB63jWCv14kgS1SIoFK5Hygdpl_fMs1dihup-2FJ8UQ41mhVMZ6XEmOHfb678Y4pxggcudF9SHOoIjnyQnK4-2FSpeeILB-2FE12QIIjBXkbupnYeUZsRv65zeYKbguUSgxy3NSyCpngB1Lo3GrXv-2Fb-2BCD-2B3ajH3H2DJmNDPMIWb-2Bmg0UywcwPme7x1qoAaunkG93y9m-2BYXLxJpWDf10zPDWaiKXQ2mguETwi5u3hsTJXPDY42XzHLTuCdz7HOE25vI-2FTJ5VZJs8-3D">
http://www.clamav.net/contact.html#ml<https://u6680657.ct.sendgrid.net/wf/click?upn=gBws3HYKtNN9m2docLyuT6vQ7z-2FvID3ITaQZfkKsPDqbgiPdizrsfZ2l6T-2FLVgs8_fMs1dihup-2FJ8UQ41mhVMZ6XEmOHfb678Y4pxggcudF8OKEUBEs88Pj2LTLQC3B3G40tGUCg6Bj3KYbXgNDOUhLxpywdVqwBR4Ye8J-2Bj24Q-2FOWOoexk26jwMlYfG9COqAf-2FmjLcrJnpTnnOyknNKFo20AtHmzHRSe6fRUvB2Tp9TW-2BqZiW2IpBH4P5mKrs1znuHMsxjGV5QJm-2Buwbl-2FLzAXwpq67Be-2FOOKQNEahmiG8Y-3D</a>></p>
</blockquote>
<img src="https://u6680657.ct.sendgrid.net/wf/open?upn=fMs1dihup-2FJ8UQ41mhVMZ6XEmOHfb678Y4pxggcudF9SHOoIjnyQnK4-2FSpeeILB-2FE12QIIjBXkbupnYeUZsRv6zraMZ9rRDjFkjw3StEmw478hbJKEMR8DhPfQ1x-2B-2FUcBb7LdXyemSt1khKx2-2FfOwpdfBacaHHpIOCDeP04j8daVlXSp8PVIQg6HzrMPwQlzYRHKoZ-2BFNhDcg9JFsvEMaeu1bfZFVFQUDxmWhh-2BywCM-3D" alt="" width="1" height="1" border="0" style="height:1px !important;width:1px !important;border-width:0 !important;margin-top:0 !important;margin-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;padding-left:0 !important;"></div>
</div>
</span></span>
</body>
</html>