I am running a linux suse 10.1 system with kernel version 2.6.16 and an error
occurs with freshclam. As first step i download,compile and install new
version of clamav 90.1, but the error is kept. The error vanished, if i use no
proxy server or an external proxy server. using wwwoffle (Version 2.8e) on 
localhost
as proxy server freshclam fails like:

LD_LIBRARY_PATH=/tmp/clamav-0.90.1/libclamav/.libs  ./freshclam/.libs/freshclam 
 
--verbose --debug --config-file=/tmp/clamav-0.90.1-test.tmp/freshclam.conf \ 
--log=/tmp/freshclam-8.log --user vscan \ 
--datadir=/tmp/clamav-0.90.1-test.tmp/tmp

Current working dir is /tmp/clamav-0.90.1-test.tmp/tmp
Max retries == 1
ClamAV update process started at Mon Mar 19 03:58:41 2007
Querying current.cvd.clamav.net
TTL: 178
Software version from DNS: 0.90.1
LibClamAV debug: Can't open CVD file main.cvd
Connecting via localhost
Retrieving http://clamav.pcn.de/main.cvd
Trying to download http://clamav.pcn.de/main.cvd (IP: 127.0.0.1)
Downloading main.cvd [*]
LibClamAV debug: Not a CVD head.
ERROR: Verification: Broken or not a CVD file
Giving up on clamav.pcn.de...
Update failed. Your network may be down or none of the mirrors listed in 
freshclam.conf is working. Check http://www.clamav.net/support/mirror-problem 
for possible reasons.

I verified that DNS is working alright like in:
# host -a current.cvd.clamav.net | grep TXT
current.cvd.clamav.net. 900     IN      TXT     "0.90.1:42:2869:1174271655:1"

I verified that the proxy server get the virus signature database file 
correctly
# wwwoffle-ls -c /etc/wwwoffle/wwwoffle.conf http://clamav.pcn.de/daily.cvd
DfCHqUyiOOX9GZ4J+GuR8sw  339643 Jan 13 17:51 http://clamav.pcn.de/daily.cvd

# dd bs=1 skip=418
if=/var/spool/wwwoffle/http/clamav.pcn.de/DfCHqUyiOOX9GZ4J+GuR8sw 
of=/tmp/test.cvd

# sigtool --debug --info=/tmp/test.cvd 
Build time: 19 Mar 2007 01-41 +0000
Version: 2869
# of signatures: 16327
Functionality level: 14
Builder: ccordes
MD5: 80e832cecd2aa2caeb6bba0b7523b0a1
Digital signature: 
7gbP9ixOF/CPFvnbifJj0RaFXwLek3UmbDmawfcSSRrp+XQirf6zC5NF2LAdlCFqLyQUar+ECZpPm35IzndfN8InSs59xuMteuk1mVnKxMZrzvzDy2tig7ca6YywFA+/l0P168DsO/4bymuxdmeF4bp9iS1JzEop774qXXhIj4e
LibClamAV debug: MD5(.tar.gz) = 80e832cecd2aa2caeb6bba0b7523b0a1
LibClamAV debug: Decoded signature: 80e832cecd2aa2caeb6bba0b7523b0a1
LibClamAV debug: Digital signature is correct.
Verification OK.

I found some similar messages about freshclam-protocol-bug with buggy
proxy-servers, but no explanation how to solve the problem.
here are the  headers of my proxy server.
# head -12 /var/spool/wwwoffle/http/clamav.pcn.de/DfCHqUyiOOX9GZ4J+GuR8sw 
HTTP/1.1 200 OK
Date: Mon, 19 Mar 2007 03:11:21 GMT
Server: Apache/2.0.55 (Debian) PHP/5.1.4-0.1 mod_ssl/2.0.55 OpenSSL/0.9.8c 
mod_perl/2.0.2 Perl/v5.8.8
Last-Modified: Mon, 19 Mar 2007 01:41:00 GMT
ETag: "199de4-10396e-ae6de300"
Accept-Ranges: bytes
Content-Length: 1063278
Cache-Control: max-age=7200
Expires: Mon, 19 Mar 2007 05:11:21 GMT
Connection: close
Content-Type: text/plain; charset=ISO-8859-1

thanks for hints and solution,
joerg jenderek
-- 
Jörg Jenderek   email:  joerg.jen.der.ek (at) gmx.net
Germany         PGP:    B9FE A356 283E 0048 6389  18BF AFF2 B1C9 421A D4D6
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to