On 22.03.17 08:17, David Pullman wrote:
I'm testing the use of an S3 bucket to store databases for a private
mirror. I'm getting an error when running freshclam against this private
mirror. Freshclam successfully downloads the CVD files but then fails. It
seems to be running "If-Modified-Since"
This is what "PrivateMirror" does. It turns DNS off and uses IMS.
Maybe you should use "DatabaseMirror" instead to check for actual versions.
after the download and looking for
the CVD in the wrong place?
Seems you just did not get what DatabaseCustomURL means - it configures
additional URLs, it does not replace standard URLs of http://mirror/main.cvd
etc.
I've loaded a copy of byte code.cvd, daily.cvd, and main.cvd onto the
bucket into a folder path clamav/dev/. The freshclam.conf has the following:
PrivateMirror idsstagingtest.s3-website-us-east-1.amazonaws.com
DatabaseCustomURL
http://idsstagingtest.s3-website-us-east-1.amazonaws.com/clamav/dev/bytecode.cvd
DatabaseCustomURL
http://idsstagingtest.s3-website-us-east-1.amazonaws.com/clamav/dev/daily.cvd
DatabaseCustomURL
http://idsstagingtest.s3-website-us-east-1.amazonaws.com/clamav/dev/main.cvd
Note the path portion of the DatabaseCustomURLs. The download runs and
finds the files:
Wed Mar 22 11:32:50 2017 -> Trying to download
http://idsstagingtest.s3-website-us-east-1.am
azonaws.com/clamav/dev/main.cvd
but the subsequent check under If-Modified-Since is looking at the root of
the bucket:
Wed Mar 22 11:32:58 2017 -> If-Modified-Since: Wed, 16 Mar 2016 23:17:06 GMT
Wed Mar 22 11:32:58 2017 -> Reading CVD header (main.cvd): Wed Mar 22
11:32:58 2017 -> Connected to
idsstagingtest.s3-website-us-east-1.amazonaws.com.
Wed Mar 22 11:32:58 2017 -> Trying to retrieve CVD header of
http://idsstagingtest.s3-website-us-east-1.amazonaws.com/main.cvd
Wed Mar 22 11:32:58 2017 -> WARNING: main.cvd not found on remote server
I did a separate test where I put the files at the root of the bucket and
it's all right with that.
I was wondering if there is something I've not configured correctly, or is
it just not supported to use a path in the private mirror specification? It
seems to work for the download, but the check may be using a different file
spec?
You can try that one. I'm not sure whether that one works...
--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
My mind is like a steel trap - rusty and illegal in 37 states.
_______________________________________________
clamav-users mailing list
[email protected]
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
