We have 8 RSA servers on SUSE Linux and wanted to utilize ClamAV on them. Since we didn't have a Linux guru, ClamAV guru or free time to investigate, we hired an outside consultant to set up an internal server as a private mirror (redhat linux) and setup ClamAV to download to one of our RSA servers and run the scan daily. He provided documentation to set up the other servers. So far I'm not having much luck. I'm watching the firewalls and the RSA servers are getting through to our ClamAV private mirror. However we receive errors when running freshclam.
Examples: ClamAV update process started at Wed Nov 1 13:06:38 2017 Reading CVD header (main.cld): nonblock_connect: connect timing out (30 secs) Can't connect to port 80 of host clamav01 (IP: 10.X.X.X) Reading CVD header (main.cvd): nonblock_connect: connect timing out (30 secs) Can't connect to port 80 of host clamav01 (IP: 10.X.X.X) WARNING: Can't read main.cvd header from clamav01 (IP: ) Giving up on clamav01... Update failed. Your network may be down or none of the mirrors listed in /etc/freshclam.conf is working. Check http://www.clamav.net/doc/mirrors-faq.html for possible reasons. Per the instructions on the site in the error, I tried the -v option. It does the same thing. Current working dir is /var/lib/clamav Max retries == 3 ClamAV update process started at Wed Nov 1 13:51:39 2017 Using IPv6 aware code If-Modified-Since: Wed, 07 Jun 2017 21:38:10 GMT Reading CVD header (main.cld): nonblock_connect: connect timing out (30 secs) Can't connect to port 80 of host clamav01 (IP: 10.X.X.X) If-Modified-Since: Wed, 07 Jun 2017 21:38:10 GMT Reading CVD header (main.cvd): nonblock_connect: connect timing out (30 secs) Can't connect to port 80 of host clamav01 (IP: 10.X.X.X) Giving up on clamav01... Update failed. Your network may be down or none of the mirrors listed in /etc/freshclam.conf is working. Check http://www.clamav.net/doc/mirrors-faq.html for possible reasons. Our network is not down. I can run these freshclam commands at the same time on our one working RSA server as the nonworking RSA servers and they fail when it goes through. I've monitored the firewall and both RSA servers connect with no denies. Any suggestions? _______________________________________________ clamav-users mailing list [email protected] http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
