Package: clamav Version: 0.103.2+dfsg-0+deb10u1 Severity: normal Dear Maintainer,
Clamav no longer download updates on my server. I am in a situation where I get message: Incremental update failed, trying to download daily.cvd However, freshclam tried so hard to download the diff that I get quick out every time from the mirror with the error: Tue Jul 20 15:45:49 2021 -> ^Can't download daily.cvd from https://database.clamav.net/daily.cvd Tue Jul 20 15:45:49 2021 -> ^FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN). Tue Jul 20 15:45:49 2021 -> This means that you have been rate limited by the CDN. Tue Jul 20 15:45:49 2021 -> 1. Run FreshClam no more than once an hour to check for updates. Tue Jul 20 15:45:49 2021 -> FreshClam should check DNS first to see if an update is needed. Tue Jul 20 15:45:49 2021 -> 2. If you have more than 10 hosts on your network attempting to download, Tue Jul 20 15:45:49 2021 -> it is recommended that you set up a private mirror on your network using Tue Jul 20 15:45:49 2021 -> cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the Tue Jul 20 15:45:49 2021 -> CDN and your own network. Tue Jul 20 15:45:49 2021 -> 3. Please do not open a ticket asking for an exemption from the rate limit, Tue Jul 20 15:45:49 2021 -> it will not be granted. Tue Jul 20 15:45:49 2021 -> ^You are on cool-down until after: 2021-07-20 19:45:49 Tue Jul 20 15:45:49 2021 -> *Current working dir is /var/lib/clamav/ Tue Jul 20 15:45:49 2021 -> *check_for_new_database_version: Local copy of main found: main.cld. Tue Jul 20 15:45:49 2021 -> *query_remote_database_version: main.cvd version from DNS: 61 Tue Jul 20 15:45:49 2021 -> main database available for update (local version: 59, remote version: 61) See attached full log. I expected freshclam to give up retrying patching the database and switch to full download *before* hitting the rate limitation. Every time it gives up and switch to full download, it is too late and the full download fails too. As a result, freshclam is totally broken here. -- Package-specific info: --- configuration --- Checking configuration files in /etc/clamav Config file: clamd.conf ----------------------- AlertExceedsMax disabled PreludeEnable disabled PreludeAnalyzerName = "ClamAV" LogFile = "/var/log/clamav/clamav.log" LogFileUnlock disabled LogFileMaxSize = "4294967295" LogTime = "yes" LogClean disabled LogSyslog disabled LogFacility = "LOG_LOCAL6" LogVerbose disabled LogRotate = "yes" ExtendedDetectionInfo = "yes" PidFile disabled TemporaryDirectory disabled DatabaseDirectory = "/var/lib/clamav" OfficialDatabaseOnly disabled LocalSocket = "/var/run/clamav/clamd.ctl" LocalSocketGroup = "clamav" LocalSocketMode = "666" FixStaleSocket = "yes" TCPSocket disabled TCPAddr disabled MaxConnectionQueueLength = "15" StreamMaxLength = "26214400" StreamMinPort = "1024" StreamMaxPort = "2048" MaxThreads = "12" ReadTimeout = "180" CommandReadTimeout = "5" SendBufTimeout = "200" MaxQueue = "100" IdleTimeout = "30" ExcludePath disabled MaxDirectoryRecursion = "15" FollowDirectorySymlinks disabled FollowFileSymlinks disabled CrossFilesystems = "yes" SelfCheck = "3600" ConcurrentDatabaseReload = "yes" DisableCache disabled VirusEvent disabled ExitOnOOM disabled AllowAllMatchScan = "yes" Foreground disabled Debug disabled LeaveTemporaryFiles disabled User = "clamav" Bytecode = "yes" BytecodeSecurity = "TrustSigned" BytecodeTimeout = "60000" BytecodeUnsigned disabled BytecodeMode = "Auto" DetectPUA disabled ExcludePUA disabled IncludePUA disabled ScanPE = "yes" ScanELF = "yes" ScanMail = "yes" ScanPartialMessages disabled PhishingSignatures = "yes" PhishingScanURLs = "yes" HeuristicAlerts = "yes" HeuristicScanPrecedence disabled StructuredDataDetection disabled StructuredMinCreditCardCount = "3" StructuredMinSSNCount = "3" StructuredSSNFormatNormal = "yes" StructuredSSNFormatStripped disabled ScanHTML = "yes" ScanOLE2 = "yes" AlertBrokenExecutables disabled AlertBrokenMedia disabled AlertEncrypted disabled StructuredCCOnly disabled AlertEncryptedArchive disabled AlertEncryptedDoc disabled AlertOLE2Macros disabled AlertPhishingSSLMismatch disabled AlertPhishingCloak disabled AlertPartitionIntersection disabled ScanPDF = "yes" ScanSWF = "yes" ScanXMLDOCS = "yes" ScanHWP3 = "yes" ScanArchive = "yes" ForceToDisk disabled MaxScanTime = "120000" MaxScanSize = "104857600" MaxFileSize = "26214400" MaxRecursion = "16" MaxFiles = "10000" MaxEmbeddedPE = "10485760" MaxHTMLNormalize = "10485760" MaxHTMLNoTags = "2097152" MaxScriptNormalize = "5242880" MaxZipTypeRcg = "1048576" MaxPartitions = "50" MaxIconsPE = "100" MaxRecHWP3 = "16" PCREMatchLimit = "10000" PCRERecMatchLimit = "5000" PCREMaxFileSize = "26214400" PCREMaxFileSize = "26214400" OnAccessMountPath disabled OnAccessIncludePath disabled OnAccessExcludePath disabled OnAccessExcludeRootUID disabled OnAccessExcludeUID disabled OnAccessExcludeUname disabled OnAccessMaxFileSize = "5242880" OnAccessDisableDDD disabled OnAccessPrevention disabled OnAccessExtraScanning disabled OnAccessCurlTimeout = "5000" OnAccessMaxThreads = "5" OnAccessRetryAttempts disabled OnAccessDenyOnError disabled DevACOnly disabled DevACDepth disabled DevPerformance disabled DevLiblog disabled DisableCertCheck disabled AlgorithmicDetection = "yes" BlockMax disabled PhishingAlwaysBlockSSLMismatch disabled PhishingAlwaysBlockCloak disabled PartitionIntersection disabled OLE2BlockMacros disabled ArchiveBlockEncrypted disabled Config file: freshclam.conf --------------------------- LogFileMaxSize = "4294967295" LogTime = "yes" LogSyslog disabled LogFacility = "LOG_LOCAL6" LogVerbose disabled LogRotate = "yes" PidFile disabled DatabaseDirectory = "/var/lib/clamav" Foreground disabled Debug disabled UpdateLogFile = "/var/log/clamav/freshclam.log" DatabaseOwner = "clamav" Checks = "12" DNSDatabaseInfo = "current.cvd.clamav.net" DatabaseMirror = "db.fr.clamav.net", "db.local.clamav.net", "database.clamav.net" PrivateMirror disabled MaxAttempts = "5" ScriptedUpdates = "yes" TestDatabases = "yes" CompressLocalDatabase disabled ExtraDatabase disabled ExcludeDatabase disabled DatabaseCustomURL disabled HTTPProxyServer disabled HTTPProxyPort disabled HTTPProxyUsername disabled HTTPProxyPassword disabled HTTPUserAgent disabled NotifyClamd = "/etc/clamav/clamd.conf" OnUpdateExecute disabled OnErrorExecute disabled OnOutdatedExecute disabled LocalIPAddress disabled ConnectTimeout = "30" ReceiveTimeout = "30" Bytecode = "yes" clamav-milter.conf not found Software settings ----------------- Version: 0.103.2 Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2 LIBXML2 PCRE2 ICONV JSON Database information -------------------- Database directory: /var/lib/clamav daily.cld: version 26231, sigs: 3996055, built on Wed Jul 14 13:05:45 2021 main.cld: version 59, sigs: 4564902, built on Mon Nov 25 14:56:15 2019 bytecode.cld: version 333, sigs: 92, built on Mon Mar 8 16:21:51 2021 Total number of signatures: 8561049 Platform information -------------------- uname: Linux 4.19.0-17-amd64 #1 SMP Debian 4.19.194-1 (2021-06-10) x86_64 OS: linux-gnu, ARCH: x86_64, CPU: x86_64 Full OS version: Debian GNU/Linux 10 (buster) zlib version: 1.2.11 (1.2.11), compile flags: a9 platform id: 0x0a217b7b0800000000080300 Build information ----------------- GNU C: 8.3.0 (8.3.0) CPPFLAGS: -Wdate-time -D_FORTIFY_SOURCE=2 CFLAGS: -g -O2 -fdebug-prefix-map=/build/clamav-8IIwz9/clamav-0.103.2+dfsg=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 CXXFLAGS: -g -O2 -fdebug-prefix-map=/build/clamav-8IIwz9/clamav-0.103.2+dfsg=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64 LDFLAGS: -Wl,-z,relro -Wl,-z,now -Wl,--as-needed Configure: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=/usr/include' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-silent-rules' '--libdir=/usr/lib/x86_64-linux-gnu' '--libexecdir=/usr/lib/x86_64-linux-gnu' '--runstatedir=/run' '--disable-maintainer-mode' '--disable-dependency-tracking' 'CFLAGS=-g -O2 -fdebug-prefix-map=/build/clamav-8IIwz9/clamav-0.103.2+dfsg=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fdebug-prefix-map=/build/clamav-8IIwz9/clamav-0.103.2+dfsg=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -Wl,--as-needed' '--with-dbdir=/var/lib/clamav' '--sysconfdir=/etc/clamav' '--disable-clamav' '--disable-unrar' '--enable-milter' '--enable-dns-fix' '--with-libjson' '--with-system-libmspack' '--with-libcurl=/usr' '--with-gnu-ld' '--with-systemdsystemunitdir=/lib/systemd/system' 'build_alias=x86_64-linux-gnu' 'OBJCFLAGS=-g -O2 -fdebug-prefix-map=/build/clamav-8IIwz9/clamav-0.103.2+dfsg=. -fstack-protector-strong -Wformat -Werror=format-security' sizeof(void*) = 8 Engine flevel: 123, dconf: 123 --- data dir --- total 621784 -rw-r--r-- 1 clamav clamav 1438720 Mar 8 17:00 bytecode.cld -rw-r--r-- 1 clamav clamav 327847424 Jul 14 14:00 daily.cld -rw-r--r-- 1 clamav clamav 307403264 Nov 25 2019 main.cld -rw------- 1 clamav clamav 69 Jul 20 15:45 mirrors.dat -- System Information: Debian Release: 10.10 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-17-amd64 (SMP w/8 CPU cores) Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages clamav depends on: ii clamav-freshclam [clamav-data] 0.103.2+dfsg-0+deb10u1 ii libc6 2.28-10 ii libclamav9 0.103.2+dfsg-0+deb10u1 ii libcurl4 7.64.0-4+deb10u2 ii libjson-c3 0.12.1+ds-2+deb10u1 ii libssl1.1 1.1.1d-0+deb10u6 ii zlib1g 1:1.2.11.dfsg-1 Versions of packages clamav recommends: ii clamav-base 0.103.2+dfsg-0+deb10u1 Versions of packages clamav suggests: pn clamav-docs <none> pn libclamunrar <none> -- no debconf information
root@:~# freshclam -v --foreground Tue Jul 20 15:45:47 2021 -> *Current working dir is /var/lib/clamav/ Tue Jul 20 15:45:47 2021 -> *Loaded mirrors.dat: Tue Jul 20 15:45:47 2021 -> * version: 1 Tue Jul 20 15:45:47 2021 -> * uuid: 04063a03-b12d-4df0-9700-bf3713c9f656 Tue Jul 20 15:45:47 2021 -> * retry-after: 2021-07-20 13:06:05 Tue Jul 20 15:45:47 2021 -> ClamAV update process started at Tue Jul 20 15:45:47 2021 Tue Jul 20 15:45:47 2021 -> *Current working dir is /var/lib/clamav/ Tue Jul 20 15:45:47 2021 -> *Querying current.cvd.clamav.net Tue Jul 20 15:45:47 2021 -> *TTL: 281 Tue Jul 20 15:45:47 2021 -> *fc_dns_query_update_info: Software version from DNS: 0.103.3 Tue Jul 20 15:45:47 2021 -> ^Your ClamAV installation is OUTDATED! Tue Jul 20 15:45:47 2021 -> ^Local version: 0.103.2 Recommended version: 0.103.3 Tue Jul 20 15:45:47 2021 -> DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav Tue Jul 20 15:45:47 2021 -> ^Cool-down expired, ok to try again. Tue Jul 20 15:45:47 2021 -> *Saved mirrors.dat Tue Jul 20 15:45:47 2021 -> *Current working dir is /var/lib/clamav/ Tue Jul 20 15:45:47 2021 -> *check_for_new_database_version: Local copy of daily found: daily.cld. Tue Jul 20 15:45:47 2021 -> *query_remote_database_version: daily.cvd version from DNS: 26238 Tue Jul 20 15:45:47 2021 -> daily database available for update (local version: 26231, remote version: 26238) Current database is 7 versions behind. Downloading database patch # 26232... Tue Jul 20 15:45:48 2021 -> *Retrieving https://database.clamav.net/daily-26232.cdiff Tue Jul 20 15:45:48 2021 -> *downloadFile: Download source: https://database.clamav.net/daily-26232.cdiff Tue Jul 20 15:45:48 2021 -> *downloadFile: Download destination: ./clamav-a56c06bc3762474ce9246563bf2be23c.tmp * Expire in 0 ms for 6 (transfer 0x555e9bfbc150) * Expire in 30000 ms for 8 (transfer 0x555e9bfbc150) * Expire in 30000 ms for 2 (transfer 0x555e9bfbc150) * Expire in 1 ms for 1 (transfer 0x555e9bfbc150) * Expire in 0 ms for 1 (transfer 0x555e9bfbc150) * Expire in 1 ms for 1 (transfer 0x555e9bfbc150) * Expire in 0 ms for 1 (transfer 0x555e9bfbc150) * Expire in 0 ms for 1 (transfer 0x555e9bfbc150) * Expire in 2 ms for 1 (transfer 0x555e9bfbc150) * Expire in 0 ms for 1 (transfer 0x555e9bfbc150) * Expire in 0 ms for 1 (transfer 0x555e9bfbc150) * Expire in 2 ms for 1 (transfer 0x555e9bfbc150) * Expire in 0 ms for 1 (transfer 0x555e9bfbc150) * Expire in 0 ms for 1 (transfer 0x555e9bfbc150) * Expire in 2 ms for 1 (transfer 0x555e9bfbc150) * Expire in 1 ms for 1 (transfer 0x555e9bfbc150) * Expire in 1 ms for 1 (transfer 0x555e9bfbc150) * Expire in 2 ms for 1 (transfer 0x555e9bfbc150) * Expire in 1 ms for 1 (transfer 0x555e9bfbc150) * Expire in 1 ms for 1 (transfer 0x555e9bfbc150) * Expire in 4 ms for 1 (transfer 0x555e9bfbc150) * Expire in 2 ms for 1 (transfer 0x555e9bfbc150) * Expire in 2 ms for 1 (transfer 0x555e9bfbc150) * Expire in 8 ms for 1 (transfer 0x555e9bfbc150) * Expire in 4 ms for 1 (transfer 0x555e9bfbc150) * Expire in 4 ms for 1 (transfer 0x555e9bfbc150) * Expire in 8 ms for 1 (transfer 0x555e9bfbc150) * Expire in 5 ms for 1 (transfer 0x555e9bfbc150) * Expire in 5 ms for 1 (transfer 0x555e9bfbc150) * Expire in 8 ms for 1 (transfer 0x555e9bfbc150) * Expire in 5 ms for 1 (transfer 0x555e9bfbc150) * Expire in 6 ms for 1 (transfer 0x555e9bfbc150) * Expire in 8 ms for 1 (transfer 0x555e9bfbc150) * Expire in 7 ms for 1 (transfer 0x555e9bfbc150) * Expire in 7 ms for 1 (transfer 0x555e9bfbc150) * Expire in 8 ms for 1 (transfer 0x555e9bfbc150) * Expire in 7 ms for 1 (transfer 0x555e9bfbc150) * Expire in 7 ms for 1 (transfer 0x555e9bfbc150) * Expire in 8 ms for 1 (transfer 0x555e9bfbc150) * Expire in 10 ms for 1 (transfer 0x555e9bfbc150) * Expire in 10 ms for 1 (transfer 0x555e9bfbc150) * Expire in 8 ms for 1 (transfer 0x555e9bfbc150) * Expire in 10 ms for 1 (transfer 0x555e9bfbc150) * Expire in 10 ms for 1 (transfer 0x555e9bfbc150) * Expire in 16 ms for 1 (transfer 0x555e9bfbc150) * Expire in 14 ms for 1 (transfer 0x555e9bfbc150) * Expire in 14 ms for 1 (transfer 0x555e9bfbc150) * Expire in 16 ms for 1 (transfer 0x555e9bfbc150) * Expire in 14 ms for 1 (transfer 0x555e9bfbc150) * Expire in 14 ms for 1 (transfer 0x555e9bfbc150) * Expire in 16 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 16 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 32 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 32 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 64 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 64 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 64 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 64 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 50 ms for 1 (transfer 0x555e9bfbc150) * Expire in 64 ms for 1 (transfer 0x555e9bfbc150) * Expire in 200 ms for 1 (transfer 0x555e9bfbc150) * Expire in 200 ms for 1 (transfer 0x555e9bfbc150) * Expire in 64 ms for 1 (transfer 0x555e9bfbc150) * Expire in 200 ms for 1 (transfer 0x555e9bfbc150) * Expire in 200 ms for 1 (transfer 0x555e9bfbc150) * Expire in 200 ms for 1 (transfer 0x555e9bfbc150) * Trying 104.16.218.84... * TCP_NODELAY set * Expire in 14767 ms for 3 (transfer 0x555e9bfbc150) * Expire in 200 ms for 4 (transfer 0x555e9bfbc150) * Connected to database.clamav.net (104.16.218.84) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com * start date: Jul 15 00:00:00 2021 GMT * expire date: Jul 14 23:59:59 2022 GMT * subjectAltName: host "database.clamav.net" matched cert's "database.clamav.net" * issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x555e9bfbc150) > GET /daily-26232.cdiff HTTP/2 Host: database.clamav.net User-Agent: ClamAV/0.103.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64, UUID: 04063a03-b12d-4df0-9700-bf3713c9f656) Accept: */* Connection: close * old SSL session ID is stale, removing * Connection state changed (MAX_CONCURRENT_STREAMS == 256)! < HTTP/2 200 < date: Tue, 20 Jul 2021 13:45:48 GMT < content-type: application/octet-stream < content-length: 0 < last-modified: Wed, 14 Jul 2021 18:29:00 GMT < etag: "60ef2cec-0" < expires: Tue, 19 Jul 2022 19:47:28 GMT < cache-control: public, max-age=31471300 < cf-cache-status: HIT < age: 107106 < accept-ranges: bytes < expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"; < strict-transport-security: max-age=15552000 < x-content-type-options: nosniff < server: cloudflare < cf-ray: 671ca1d02f290883-CDG < * Connection #0 to host database.clamav.net left intact Tue Jul 20 15:45:48 2021 -> !cdiff_apply: lseek(desc, -350, SEEK_END) failed Tue Jul 20 15:45:48 2021 -> !downloadPatch: Can't apply patch Tue Jul 20 15:45:48 2021 -> ^Incremental update failed, trying to download daily.cvd Tue Jul 20 15:45:48 2021 -> *Retrieving https://database.clamav.net/daily.cvd Tue Jul 20 15:45:48 2021 -> *downloadFile: Download source: https://database.clamav.net/daily.cvd Tue Jul 20 15:45:48 2021 -> *downloadFile: Download destination: /var/lib/clamav/tmp.08dfb27e98/clamav-1c230cc47556782a1c7c4749db0d1765.tmp * Expire in 0 ms for 6 (transfer 0x555e9bfd9170) * Expire in 30000 ms for 8 (transfer 0x555e9bfd9170) * Expire in 30000 ms for 2 (transfer 0x555e9bfd9170) * Expire in 1 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 1 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 1 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 1 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 1 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 1 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 1 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 1 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 1 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 1 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 1 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Expire in 0 ms for 1 (transfer 0x555e9bfd9170) * Trying 104.16.219.84... * TCP_NODELAY set * Expire in 15000 ms for 3 (transfer 0x555e9bfd9170) * Expire in 200 ms for 4 (transfer 0x555e9bfd9170) * Connected to database.clamav.net (104.16.219.84) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com * start date: Jul 15 00:00:00 2021 GMT * expire date: Jul 14 23:59:59 2022 GMT * subjectAltName: host "database.clamav.net" matched cert's "database.clamav.net" * issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x555e9bfd9170) > GET /daily.cvd HTTP/2 Host: database.clamav.net User-Agent: ClamAV/0.103.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64, UUID: 04063a03-b12d-4df0-9700-bf3713c9f656) Accept: */* If-Modified-Since: Wed, 14 Jul 2021 11:05:45 GMT Connection: close * old SSL session ID is stale, removing * Connection state changed (MAX_CONCURRENT_STREAMS == 256)! < HTTP/2 429 < date: Tue, 20 Jul 2021 13:45:49 GMT < content-type: text/plain; charset=UTF-8 < content-length: 16 < retry-after: 33288 < x-frame-options: SAMEORIGIN < cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 < expires: Thu, 01 Jan 1970 00:00:01 GMT < cf-request-id: 0b65c37727000039ab9286d000000001 < expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"; < strict-transport-security: max-age=15552000 < x-content-type-options: nosniff < server: cloudflare < cf-ray: 671ca1d1d9a339ab-CDG < Time: 0.2s, ETA: 0.0s [========================>] 16B/16B * Connection #0 to host database.clamav.net left intact Tue Jul 20 15:45:49 2021 -> *Saved mirrors.dat Tue Jul 20 15:45:49 2021 -> ^Can't download daily.cvd from https://database.clamav.net/daily.cvd Tue Jul 20 15:45:49 2021 -> ^FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN). Tue Jul 20 15:45:49 2021 -> This means that you have been rate limited by the CDN. Tue Jul 20 15:45:49 2021 -> 1. Run FreshClam no more than once an hour to check for updates. Tue Jul 20 15:45:49 2021 -> FreshClam should check DNS first to see if an update is needed. Tue Jul 20 15:45:49 2021 -> 2. If you have more than 10 hosts on your network attempting to download, Tue Jul 20 15:45:49 2021 -> it is recommended that you set up a private mirror on your network using Tue Jul 20 15:45:49 2021 -> cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the Tue Jul 20 15:45:49 2021 -> CDN and your own network. Tue Jul 20 15:45:49 2021 -> 3. Please do not open a ticket asking for an exemption from the rate limit, Tue Jul 20 15:45:49 2021 -> it will not be granted. Tue Jul 20 15:45:49 2021 -> ^You are on cool-down until after: 2021-07-20 19:45:49 Tue Jul 20 15:45:49 2021 -> *Current working dir is /var/lib/clamav/ Tue Jul 20 15:45:49 2021 -> *check_for_new_database_version: Local copy of main found: main.cld. Tue Jul 20 15:45:49 2021 -> *query_remote_database_version: main.cvd version from DNS: 61 Tue Jul 20 15:45:49 2021 -> main database available for update (local version: 59, remote version: 61) Current database is 2 versions behind. Downloading database patch # 60... Tue Jul 20 15:45:49 2021 -> *Retrieving https://database.clamav.net/main-60.cdiff Tue Jul 20 15:45:49 2021 -> *downloadFile: Download source: https://database.clamav.net/main-60.cdiff Tue Jul 20 15:45:49 2021 -> *downloadFile: Download destination: ./clamav-deab492334127c91bf5c56a5573824ec.tmp * Expire in 0 ms for 6 (transfer 0x555e9bfc5480) * Expire in 30000 ms for 8 (transfer 0x555e9bfc5480) * Expire in 30000 ms for 2 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 1 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Expire in 0 ms for 1 (transfer 0x555e9bfc5480) * Trying 104.16.218.84... * TCP_NODELAY set * Expire in 15000 ms for 3 (transfer 0x555e9bfc5480) * Expire in 200 ms for 4 (transfer 0x555e9bfc5480) * Connected to database.clamav.net (104.16.218.84) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com * start date: Jul 15 00:00:00 2021 GMT * expire date: Jul 14 23:59:59 2022 GMT * subjectAltName: host "database.clamav.net" matched cert's "database.clamav.net" * issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x555e9bfc5480) > GET /main-60.cdiff HTTP/2 Host: database.clamav.net User-Agent: ClamAV/0.103.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64, UUID: 04063a03-b12d-4df0-9700-bf3713c9f656) Accept: */* Connection: close * old SSL session ID is stale, removing * Connection state changed (MAX_CONCURRENT_STREAMS == 256)! < HTTP/2 200 < date: Tue, 20 Jul 2021 13:45:50 GMT < content-type: application/octet-stream < content-length: 0 < last-modified: Thu, 08 Jul 2021 14:05:00 GMT < etag: "60e7060c-0" < expires: Wed, 13 Jul 2022 15:23:29 GMT < cache-control: public, max-age=30937059 < cf-cache-status: HIT < age: 436709 < accept-ranges: bytes < expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"; < strict-transport-security: max-age=15552000 < x-content-type-options: nosniff < server: cloudflare < cf-ray: 671ca1d7a95440ed-CDG < * Connection #0 to host database.clamav.net left intact Tue Jul 20 15:45:50 2021 -> !cdiff_apply: lseek(desc, -350, SEEK_END) failed Tue Jul 20 15:45:50 2021 -> !downloadPatch: Can't apply patch Tue Jul 20 15:45:50 2021 -> ^Incremental update failed, trying to download main.cvd Tue Jul 20 15:45:50 2021 -> *Retrieving https://database.clamav.net/main.cvd Tue Jul 20 15:45:50 2021 -> *downloadFile: Download source: https://database.clamav.net/main.cvd Tue Jul 20 15:45:50 2021 -> *downloadFile: Download destination: /var/lib/clamav/tmp.08dfb27e98/clamav-1a93520cfe82c3390e40a643eb19f298.tmp * Expire in 0 ms for 6 (transfer 0x555e9bfd9130) * Expire in 30000 ms for 8 (transfer 0x555e9bfd9130) * Expire in 30000 ms for 2 (transfer 0x555e9bfd9130) * Expire in 1 ms for 1 (transfer 0x555e9bfd9130) * Expire in 0 ms for 1 (transfer 0x555e9bfd9130) * Expire in 1 ms for 1 (transfer 0x555e9bfd9130) * Expire in 0 ms for 1 (transfer 0x555e9bfd9130) * Expire in 0 ms for 1 (transfer 0x555e9bfd9130) * Expire in 1 ms for 1 (transfer 0x555e9bfd9130) * Expire in 0 ms for 1 (transfer 0x555e9bfd9130) * Expire in 0 ms for 1 (transfer 0x555e9bfd9130) * Expire in 1 ms for 1 (transfer 0x555e9bfd9130) * Expire in 0 ms for 1 (transfer 0x555e9bfd9130) * Expire in 0 ms for 1 (transfer 0x555e9bfd9130) * Expire in 0 ms for 1 (transfer 0x555e9bfd9130) * Trying 104.16.219.84... * TCP_NODELAY set * Expire in 15000 ms for 3 (transfer 0x555e9bfd9130) * Expire in 200 ms for 4 (transfer 0x555e9bfd9130) * Connected to database.clamav.net (104.16.219.84) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com * start date: Jul 15 00:00:00 2021 GMT * expire date: Jul 14 23:59:59 2022 GMT * subjectAltName: host "database.clamav.net" matched cert's "database.clamav.net" * issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x555e9bfd9130) > GET /main.cvd HTTP/2 Host: database.clamav.net User-Agent: ClamAV/0.103.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64, UUID: 04063a03-b12d-4df0-9700-bf3713c9f656) Accept: */* If-Modified-Since: Mon, 25 Nov 2019 13:56:15 GMT Connection: close * old SSL session ID is stale, removing * Connection state changed (MAX_CONCURRENT_STREAMS == 256)! < HTTP/2 429 < date: Tue, 20 Jul 2021 13:45:50 GMT < content-type: text/plain; charset=UTF-8 < content-length: 16 < retry-after: 33577 < x-frame-options: SAMEORIGIN < cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 < expires: Thu, 01 Jan 1970 00:00:01 GMT < cf-request-id: 0b65c37be800003a11610a4000000001 < expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"; < strict-transport-security: max-age=15552000 < x-content-type-options: nosniff < server: cloudflare < cf-ray: 671ca1d97e753a11-CDG < Time: 0.3s, ETA: 0.0s [========================>] 16B/16B * Connection #0 to host database.clamav.net left intact Tue Jul 20 15:45:50 2021 -> *Saved mirrors.dat Tue Jul 20 15:45:50 2021 -> ^Can't download main.cvd from https://database.clamav.net/main.cvd Tue Jul 20 15:45:50 2021 -> ^FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN). Tue Jul 20 15:45:50 2021 -> This means that you have been rate limited by the CDN. Tue Jul 20 15:45:50 2021 -> 1. Run FreshClam no more than once an hour to check for updates. Tue Jul 20 15:45:50 2021 -> FreshClam should check DNS first to see if an update is needed. Tue Jul 20 15:45:50 2021 -> 2. If you have more than 10 hosts on your network attempting to download, Tue Jul 20 15:45:50 2021 -> it is recommended that you set up a private mirror on your network using Tue Jul 20 15:45:50 2021 -> cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the Tue Jul 20 15:45:50 2021 -> CDN and your own network. Tue Jul 20 15:45:50 2021 -> 3. Please do not open a ticket asking for an exemption from the rate limit, Tue Jul 20 15:45:50 2021 -> it will not be granted. Tue Jul 20 15:45:50 2021 -> ^You are on cool-down until after: 2021-07-20 19:45:50 Tue Jul 20 15:45:50 2021 -> *Current working dir is /var/lib/clamav/ Tue Jul 20 15:45:50 2021 -> *check_for_new_database_version: Local copy of bytecode found: bytecode.cld. Tue Jul 20 15:45:50 2021 -> *query_remote_database_version: bytecode.cvd version from DNS: 333 Tue Jul 20 15:45:50 2021 -> bytecode.cld database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2) Tue Jul 20 15:45:50 2021 -> *fc_update_database: bytecode.cld already up-to-date.
signature.asc
Description: This is a digitally signed message part.
