Hi, all,
running:
ClamAV 0.88.6/2405/Tue Jan 2 09:39:39 2007
on Solaris 9
During the weekend we had problems on two (out of four) mailservers
which run clamav, where freshclam 'died'. i.e. the freshclam process was
gone. We use db.nl.clamav.net (on one mailserver) and db.de.clamav.net
(on the other mailserver) as mirrors. On system 1, in the freshclam
logfile shows:
Received signal: wake up
ClamAV update process started at Sun Dec 31 14:49:23 2006
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.88.6 Recommended version: 0.88.7
DON'T PANIC! Read http://www.clamav.net/faq.html
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder:
tkojm)
nonblock_connect: connect timing out (30 secs)
nonblock_connect: connect timing out (30 secs)
nonblock_connect: connect timing out (30 secs)
nonblock_connect: connect timing out (30 secs)
nonblock_connect: connect timing out (30 secs)
nonblock_connect: connect timing out (30 secs)
nonblock_connect: connect timing out (30 secs)
connect_error: getsockopt(SO_ERROR): fd=0 error=145: Connection timed out
According to our monitoring system, the process disappeared between
14:50 and 14:55.
On the 2nd MTA:
Received signal: wake up
ClamAV update process started at Sun Dec 31 14:29:54 2006
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.88.6 Recommended version: 0.88.7
DON'T PANIC! Read http://www.clamav.net/faq.html
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder:
tkojm)
WARNING: Mirror 194.109.6.74 is not synchronized.
Trying again in 5 secs...
ClamAV update process started at Sun Dec 31 14:30:00 2006
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.88.6 Recommended version: 0.88.7
DON'T PANIC! Read http://www.clamav.net/faq.html
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder:
tkojm)
WARNING: Mirror 194.109.6.74 is not synchronized.
Trying again in 5 secs...
ClamAV update process started at Sun Dec 31 14:30:07 2006
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.88.6 Recommended version: 0.88.7
DON'T PANIC! Read http://www.clamav.net/faq.html
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder:
tkojm)
WARNING: Mirror 194.109.6.74 is not synchronized.
Giving up on db.nl.clamav.net...
ClamAV update process started at Sun Dec 31 14:30:08 2006
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.88.6 Recommended version: 0.88.7
DON'T PANIC! Read http://www.clamav.net/faq.html
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder:
tkojm)
connect_error: getsockopt(SO_ERROR): fd=0 error=146: Connection refused
nonblock_connect: connect timing out (30 secs)
--------------------------------------
The two mailservers are in two geographically different regions of
Europe, separate networks, separate access to Internet etc.
According to the monitoring system, the freshclam process disappeared
between 14:29 and 14:34. Running ClamAV on Solaris 9. Any idea why after
a 'connection refused' or 'connection timed out' the freshclam process dies?
NB This problem occurs occassionally. We upgraded to 0.88.6 on November
27th 2006. The freshclam problem occurred first on December 5th 2006,
then on December 14th 2006 and now on December 31st 2006. Each time it
seems to be related to the non-availability of one of the mirrors (or
database.clamav.net?).
Any help appreciated. AFAIK 0.88.7 is a security related upgrade and
will not change the way freshclam behaves?
Kind regards,
/rolf
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
