I am running a linux suse 10.1 system with kernel version 2.6.16 and an error
occurs with freshclam. As first step i download,compile and install new
version of clamav 88.7, but the error is kept. The error vanished, if i use no
proxy server or an external proxy server. using wwwoffle (Version 2.8e) on 
localhost
as proxy server freshclam fails like:

# freshclam  --verbose --debug --config-file=/etc/freshclam.conf 
--log=/tmp/freshclam-7.log --datadir=/tmp/clamav-0.88.7-test.tmp/tmp --user 
vscan --debug
Current working dir is /tmp/clamav-0.88.7-test.tmp/tmp
Max retries == 1
ClamAV update process started at Sat Jan 13 18:18:43 2007
Querying current.cvd.clamav.net
TTL: 757
Software version from DNS: 0.88.7
main.cvd version from DNS: 42
Connecting via localhost
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: tkojm)
daily.cvd version from DNS: 2438
Connecting via localhost
Retrieving http://clamav.pcn.de/daily.cvd
Downloading daily.cvd [*]
LibClamAV debug: Not a CVD head.
ERROR: Verification: Broken or not a CVD file
Giving up on clamav.pcn.de...
ERROR: Update failed. Your network may be down or none of the mirrors listed 
in freshclam.conf is working.
Freeing option list...done

I verified that DNS is working alright like in:
# host -a current.cvd.clamav.net | grep TXT
current.cvd.clamav.net. 257     IN      TXT     "0.88.7:42:2438:1168705741:1"

I verified that the proxy server get the virus signature database file 
correctly
# wwwoffle-ls -c /etc/wwwoffle/wwwoffle.conf http://clamav.pcn.de/daily.cvd
DfCHqUyiOOX9GZ4J+GuR8sw  339643 Jan 13 17:51 http://clamav.pcn.de/daily.cvd
# dd bs=1 skip=417 
if=/var/spool/wwwoffle/http/clamav.pcn.de/DfCHqUyiOOX9GZ4J+GuR8sw 
of=/tmp/test.cvd
# sigtool --debug --info=/tmp/test.cvd 
Build time: 13 Jan 2007 11-34 +0000
Version: 2438
# of signatures: 2729
Functionality level: 9
Builder: sven
MD5: ba749839ebbe823118a06739d703c7fe
Digital signature: 
Iw94bBjkYhKpnPEU75PoymfZo0ZHUic0pAilZ+Ve3qSHeEdgvEcd81VYRTFuJNdD7a1eV4Wa7MQSQ23GP/ry/VnSEfyB8KR0TXJr5fPQURTCOcDawph8EYJVW1InhOw2s5zgTWTCS957B3UhOm0L442cf2I4dyfX8OVZ1QCF8Cb
LibClamAV debug: MD5(.tar.gz) = ba749839ebbe823118a06739d703c7fe
LibClamAV debug: Decoded signature: ba749839ebbe823118a06739d703c7fe
LibClamAV debug: Digital signature is correct.
Verification OK.

I found some similar messages about freshclam-protocol-bug with buggy
proxy-servers, but no explanation how to solve the problem.
here are the  headers of my proxy server.
# head -12 /var/spool/wwwoffle/http/clamav.pcn.de/DfCHqUyiOOX9GZ4J+GuR8sw 
HTTP/1.0 200 OK
Date: Sat, 13 Jan 2007 16:45:51 GMT
Server: Apache/2.0.55 (Debian) PHP/5.1.4-0.1 mod_ssl/2.0.55 OpenSSL/0.9.8c 
mod_perl/2.0.2 Perl/v5.8.8
Last-Modified: Sat, 13 Jan 2007 11:34:00 GMT
ETag: "199db6-52d1a-637a3a00"
Accept-Ranges: bytes
Cache-Control: max-age=7200
Expires: Sat, 13 Jan 2007 18:45:51 GMT
Content-Type: text/plain; charset=ISO-8859-1
Connection: close
Proxy-Connection: close

thanks for hints and solution,
joerg jenderek

-- 
Jörg Jenderek   email:  joerg.jen.der.ek (at) gmx.net
Germany         PGP:    B9FE A356 283E 0048 6389  18BF AFF2 B1C9 421A D4D6


-- 
Jörg Jenderek   email:  joerg.jen.der.ek (at) gmx.net
Germany         PGP:    B9FE A356 283E 0048 6389  18BF AFF2 B1C9 421A D4D6
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to