We were getting a lot of failed attempts to download from various
mirrors, but I don't think it ever completely blocked updates.
In any case, early Friday morning I deleted mirrors.dat to see if it
would help. Since then I have seen several "bad" mirrors, but have
still been able to download (we're most recently at 23713).

One perhaps significant difference from common usage is that freshclam
on our gateway is run as cron job every 1.5 hours, rather than running
continuously and doing its own timing. Thus it gets "reset" every time
it attempts to update the database. (We always download the cvd files
to our gateway machine and then serve them from there to the other
machines on the LAN.)

Some of today's error msgs from freshclam include:

  WARNING: getfile: daily.cvd not found on db.us.clamav.net (IP: 155.98.64.87)
  Can't connect to port 80 of host db.us.clamav.net (IP: 64.6.100.177)
  Can't connect to port 80 of host db.us.clamav.net (IP: 208.72.56.53)
  Can't connect to port 80 of host db.us.clamav.net (IP: 64.22.33.90)
  Can't connect to port 80 of host db.us.clamav.net (IP: 168.143.19.95)

The latest successful download was:

  ------------------------------  Friday 25 August 2017 at 18:06:02 EDT
  Current working dir is /opt/clamav.d/clamav.0.99.2/share/clamav
  Max retries == 4
  ClamAV update process started at Fri Aug 25 18:06:02 2017
  Using IPv6 aware code
  Querying current.cvd.clamav.net
  TTL: 615
  Software version from DNS: 0.99.2
  main.cvd version from DNS: 58
  main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder: 
sigmgr)
  daily.cvd version from DNS: 23713
  Retrieving http://db.us.clamav.net/daily.cvd
  Trying to download http://db.us.clamav.net/daily.cvd (IP: 150.214.142.197)
  Downloading daily.cvd [100%]
  Loading signatures from daily.cvd
  Properly loaded 1742567 signatures from new daily.cvd
  daily.cvd updated (version: 23713, sigs: 1742567, f-level: 63, builder: neo)
  Querying daily.23713.82.1.0.96D68EC5.ping.clamav.net
  bytecode.cvd version from DNS: 309
  bytecode.cvd is up to date (version: 309, sigs: 69, f-level: 63, builder: 
bbaker)
  Database updated (6308885 signatures) from db.us.clamav.net (IP: 
150.214.142.197)
  OnUpdateExecute: EXIT_1
  ------------------------------  Friday 25 August 2017 at 18:06:34 EDT


=================================================================================


On Fri, 25 Aug 2017 20:44:58 +0000
"Joel Esler (jesler)" <jes...@cisco.com> wrote:

> We are working on ways to not only fix the on going mirror issues,
> but prevent them in the future, as well as bring back the Mirror page
> on ClamAV.net<http://ClamAV.net> at some point soon.
> 
> That being said — We are seeing nothing wrong between our mirrors
> (that work), and our Sync servers.  However, the reports that we are
> seeing here, through social media, and the direct reports via the
> website are telling us that you need to delete mirrors.dat and the
> daily.cld file that are on your systems and re-run Freshclam.
> 
> 
> --
> Joel Esler | Talos: Manager |
> jes...@cisco.com<mailto:jes...@cisco.com>
> 
> 
> 
> 
> 
> 
> On Aug 25, 2017, at 2:04 PM, Joel Esler (jesler)
> <jes...@cisco.com<mailto:jes...@cisco.com>> wrote:
> 
> I am discussing this with our team, about how to make this process
> not suck.
> 
> 
> --
> Joel Esler | Talos: Manager |
> jes...@cisco.com<mailto:jes...@cisco.com><mailto:jes...@cisco.com>
> 
> 
> 
> 
> 
> 
> On Aug 25, 2017, at 11:01 AM, Dennis Peterson
> <denni...@inetnw.com<mailto:denni...@inetnw.com><mailto:denni...@inetnw.com>>
> wrote:
> 
> This is abysmal.
> 
> # freshclam --list-mirrors |grep Success |sort -n -k2
> Successes: 0
> Successes: 0
> Successes: 0
> Successes: 0
> Successes: 0
> Successes: 0
> Successes: 0
> Successes: 4
> Successes: 7
> Successes: 8
> Successes: 11
> Successes: 11
> Successes: 19
> Successes: 46
> Successes: 79
> Successes: 81
> Successes: 85
> Successes: 90
> Successes: 176
> Successes: 178
> Successes: 188
> Successes: 215
> 
> # freshclam --list-mirrors |grep Fail |sort -n -k2
> Failures: 0
> Failures: 0
> Failures: 2
> Failures: 4
> Failures: 12
> Failures: 19
> Failures: 21
> Failures: 23
> Failures: 55
> Failures: 90
> Failures: 102
> Failures: 109
> Failures: 110
> Failures: 148
> Failures: 148
> Failures: 160
> Failures: 163
> Failures: 183
> Failures: 274
> Failures: 274
> Failures: 275
> Failures: 275
> 
> # freshclam --list-mirrors |grep -B2 Fail
> IP: 208.72.56.53
> Successes: 0
> Failures: 275
> --
> IP: 200.236.31.1
> Successes: 81
> Failures: 160
> --
> IP: 64.6.100.177
> Successes: 0
> Failures: 274
> --
> ...
> 
> dp
> 
> On 8/25/17 4:00 AM, Joel Esler (jesler) wrote:
> On it
> 
> Sent from my iPhone
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to