Avast Updates Fail!
-
Now lets get things into prospective! I have a wireless network spanning a few hundred kilometers! Now when new business clients and home user do not have a good anti virus I suggests they use Avast! As to your diatribe about paying for it if you are not a home user in mute! I have a few thousand users and this is starting to be seen in all products! PAID and NOT PAID are seeing these same effects….
So back to reality and to the question at hand! Could this be a result of the cache? Could it come from to many request from 2 primary distribution ips at the core router? Need a little help with this one! It needs to be answered by those running Large diverse networks cover the thousands of users!
-
I'm running a small home network (large family) with 9 computers. I guess to your larger networks, you could consider me a lab.
Running squid and snort (all rules except backdoor, misc, and netbios), with a mixture of Avast Home, Kaspersky 7, and Symantec AV and I'm not seeing any problems with updates.
As you stated, size of the network might be a factor here.
-
I am not for sure…. I do not know if it is the AV Servers saying piss off! Or it is a incomplete cache issue with squid...... I have this on two separate systems in two different cities 100Km apart and on different providers! The on thing that is the same is the same! The are clones of each other and it is happening run both cities.... It is strange! :-\
-
One simple test - bypass squid and try a download directly. If it works you know it's squid related, if it doesn't then the problem lies elsewhere.
-
ok …
little things to do ....
Avast .vpu files must not be cached ... for while you can use donotcache feature of squid package to sites of updates of avast ... this sites can be retrieved in file servers.def (an text file) in Program Files\Alwil Software\Avast4\Setupthis is to warranty of file was not modified on some way .....
-
Well after two days of testing the updates are working again across the board! Now if you just tell squid not to cache avast.com it will not allow the updates! But if you list the 200 freaking possible update server all works fine! So I need to list all the servers for Avast, Kysperski, and a few others that are getting pissy! So the big question is how to wild card the domains/sub domains so I do not have to edit a few thousand servers by hand! :-\
-
this is a donotcache feature … but you can change this with some hacking on squid.inc
the donotcache acl uses destdomain directive and to do what you want you need dstdom_regex directive..
look your squid.conf and you will know what change in squid.inc
-
;D
Once I loaded the all of the 20 Thousand Update Servers for all of the Major Anti Virus Companies all is good! Someone should publish a no cache list for problems like this!
Thanks for the suggestions…...
:-*
-
you can do this with some hackings … on Aliases code ... and /cf/conf/config.xml
and you can put server names directly -
I live by the web interface and do not dig to deep into the config files! I have to have a "keep it simple stupid" policy! Because if I get hit by a truck there is NO ONE to keep the systems going! I am in Egypt and after 3 years here I now know that Aliens built the pyramids! Because there is now way in hell they got build by the Egyptian Minds and Egyptian Natives!
So I did it the simple way and figured the naming convention for most of the primary virus protection companies and loaded it into a text file and maualy loaded it to all pfsense servers… Problem solved and all is quite!
If wanted I can post the No Cache Virus Server Update List.... Let me know!
