On 9/13/11 6:58 PM, "Dennis Peterson" <[email protected]> wrote:

> On 9/13/11 3:15 PM, Bryan Burke wrote:
> 
>> 
>> At least concerning this issue, is there anything more to be done?
> 
> Eliminate some unknowns - like maybe your DNS doesn't like big packets. Add
> this 
> *temporarily* to your host table:
> 
> 88.198.67.125   db.us.big.clamav.net
> 
> And try again - and try with your browser, too. It should show you a web page
> indentifying the site you connected to and then after a short time you will be
> sent to clamav.net.
> 
Sounds like the server will be pulled, so you may not care, but since I went
through the effort.

Made changes to the hosts file.

Ran dig $ db.us.clamav.net

> ; <<>> DiG 9.4.3-P3 <<>> db.us.clamav.net
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61401
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 16, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;db.us.clamav.net.        IN    A
> 
> ;; ANSWER SECTION:
> db.us.clamav.net.    1190    IN    CNAME    db.us.big.clamav.net.
> db.us.big.clamav.net.    50    IN    A    194.47.250.218
> db.us.big.clamav.net.    50    IN    A    194.186.47.19
> db.us.big.clamav.net.    50    IN    A    200.236.31.1
> db.us.big.clamav.net.    50    IN    A    204.109.62.22
> db.us.big.clamav.net.    50    IN    A    207.57.106.31
> db.us.big.clamav.net.    50    IN    A    208.72.56.53
> db.us.big.clamav.net.    50    IN    A    64.246.134.219
> db.us.big.clamav.net.    50    IN    A    65.19.179.67
> db.us.big.clamav.net.    50    IN    A    69.12.162.28
> db.us.big.clamav.net.    50    IN    A    69.163.100.14
> db.us.big.clamav.net.    50    IN    A    88.198.67.125
> db.us.big.clamav.net.    50    IN    A    150.214.142.197
> db.us.big.clamav.net.    50    IN    A    155.98.64.87
> db.us.big.clamav.net.    50    IN    A    168.143.19.95
> db.us.big.clamav.net.    50    IN    A    194.8.197.22
> 
> ;; Query time: 91 msec
> ;; SERVER: 10.0.1.1#53(10.0.1.1)
> ;; WHEN: Tue Sep 13 19:37:53 2011
> ;; MSG SIZE  rcvd: 298

Note that 88.198.67.125 is far down the list, so I immediately ran
> $ sudo /usr/local/clamXav/bin/freshclam --stdout --quiet --no-warnings
> --log=/usr/local/clamXav/share/clamav/freshclam.log

With the following results:
> --------------------------------------
> ClamAV update process started at Tue Sep 13 19:40:13 2011
> main.cld is up to date (version: 53, sigs: 846214, f-level: 53, builder: sven)
> connect_error: getsockopt(SO_ERROR): fd=4 error=61: Connection refused
> Can't connect to port 80 of host db.US.clamav.net (IP: 88.198.67.125)
> Downloading daily-13610.cdiff [100%]
> Downloading daily-13611.cdiff [100%]
> daily.cld updated (version: 13611, sigs: 192595, f-level: 60, builder: guitar)
> bytecode.cld is up to date (version: 144, sigs: 41, f-level: 60, builder:
> edwin)
> Database updated (1038850 signatures) from db.US.clamav.net (IP:
> 69.163.100.14)

So how could old "88" have possibly worked is way back to the top?

Sending my browser to db.US.clamav.net gives me
> Safari can¹t open the page ³http://db.us.big.clamav.net/² because Safari can¹t
> connect to the server ³db.us.big.clamav.net².

No matter how many times I try it.

Was there anything else I need to try before restoring the hosts file?


-Al-
 
-- 
Al Varnell
Mountain View, CA



_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to