Sadly not:

/usr/local/cpanel/3rdparty/bin/freshclam --verbose
Current working dir is /usr/local/cpanel/3rdparty/share/clamav
Max retries == 3
ClamAV update process started at Wed Aug 29 21:32:41 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1520
Software version from DNS: 0.100.1
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.0 Recommended version: 0.100.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
Retrieving http://database.clamav.net/main.cvd
Trying to download http://database.clamav.net/main.cvd (IP: 104.16.187.138)
WARNING: getfile: Unknown response from database.clamav.net (IP: 104.16.187.138)
WARNING: Can't download main.cvd from database.clamav.net
Querying main.0.91.0.0.6810BB8A.ping.clamav.net
Trying again in 5 secs...
ClamAV update process started at Wed Aug 29 21:32:46 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1515
Software version from DNS: 0.100.1
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.0 Recommended version: 0.100.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
Retrieving http://database.clamav.net/main.cvd
Trying to download http://database.clamav.net/main.cvd (IP: 104.16.186.138)
WARNING: getfile: Unknown response from database.clamav.net (IP: 104.16.186.138)
WARNING: Can't download main.cvd from database.clamav.net
Querying main.0.91.0.0.6810BA8A.ping.clamav.net
Trying again in 5 secs...
ClamAV update process started at Wed Aug 29 21:32:51 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1510
Software version from DNS: 0.100.1
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.0 Recommended version: 0.100.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
Retrieving http://database.clamav.net/main.cvd
Trying to download http://database.clamav.net/main.cvd (IP: 104.16.188.138)
ERROR: getfile: Unknown response from database.clamav.net (IP: 104.16.188.138)
ERROR: Can't download main.cvd from database.clamav.net
Querying main.0.91.0.0.6810BC8A.ping.clamav.net
Giving up on database.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in 
/usr/local/cpanel/3rdparty/etc/freshclam.conf is working. Check 
https://www.clamav.net/documents/official-mirror-faq for possible reasons.


________________________________
From: clamav-users <clamav-users-boun...@lists.clamav.net> on behalf of Joel 
Esler (jesler) <jes...@cisco.com>
Sent: 29 August 2018 20:07
To: ClamAV users ML
Subject: Re: [clamav-users] ERROR 403: Forbidden

Try now?

On Aug 28, 2018, at 9:31 AM, Jon Roberts 
<j...@racksrv.net<mailto:j...@racksrv.net>> wrote:

Hi Joel,

The seemingly blocked IP is 213.5.176.169

Regards, Jon

________________________________
From: clamav-users 
<clamav-users-boun...@lists.clamav.net<mailto:clamav-users-boun...@lists.clamav.net>>
 on behalf of Joel Esler (jesler) <jes...@cisco.com<mailto:jes...@cisco.com>>
Sent: 28 August 2018 14:28
To: ClamAV users ML
Subject: Re: [clamav-users] ERROR 403: Forbidden

You’re going to have to send me the IP that is getting blocked so I can look 
into why.

Sent from my iPhone

On Aug 28, 2018, at 09:03, Maarten Broekman 
<maarten.broek...@gmail.com<mailto:maarten.broek...@gmail.com>> wrote:

Yeah. One thing that might help is getting the full output of the error.

Using the following will dump the resulting HTML to your terminal and hopefully 
it will give you more information on the error.
$ curl -Lvvvv http://database.clamav.net/main-55.cdiff

At that point, the ClamAV team might be able to give you more help.

--Maarten


On Tue, Aug 28, 2018 at 8:39 AM Jon Roberts 
<j...@racksrv.net<mailto:j...@racksrv.net>> wrote:
Good idea but still no dice, it does seem like Cloudflare is blocking the 
connection don't you think?


$ wget http://database.clamav.net/main-55.cdiff
--2018-08-28 13:37:11--  http://database.clamav.net/main-55.cdiff
Resolving database.clamav.net<http://database.clamav.net/>... 104.16.188.138
Connecting to 
database.clamav.net<http://database.clamav.net/>|104.16.188.138|:80... 
connected.
HTTP request sent, awaiting response... 403 Forbidden
2018-08-28 13:37:11 ERROR 403: Forbidden.

$ wget http://database.clamav.net/main-55.cdiff
--2018-08-28 13:37:49--  http://database.clamav.net/main-55.cdiff
Resolving database.clamav.net<http://database.clamav.net/>... 104.16.186.138
Connecting to 
database.clamav.net<http://database.clamav.net/>|104.16.186.138|:80... 
connected.
HTTP request sent, awaiting response... 403 Forbidden
2018-08-28 13:37:49 ERROR 403: Forbidden.


________________________________
From: clamav-users 
<clamav-users-boun...@lists.clamav.net<mailto:clamav-users-boun...@lists.clamav.net>>
 on behalf of Maarten Broekman 
<maarten.broek...@gmail.com<mailto:maarten.broek...@gmail.com>>
Sent: 28 August 2018 13:16
To: ClamAV users ML
Subject: Re: [clamav-users] ERROR 403: Forbidden

Gotcha. Yeah, the error is because those are CloudFlare IPs and direct IP 
access doesn't work (I just tried it myself). It could be a problem with that 
one particular IP then.

I tried by name and was successful in downloads from 188 and 186. I haven't 
been directed to 189 IP address.

On the machine that failed, can you set an entry in the hosts file to force 
database.clamav.net<http://database.clamav.net/> to the 188 IP address 
temporarily?

--Maarten


On Tue, Aug 28, 2018 at 6:34 AM Jon Roberts 
<j...@racksrv.net<mailto:j...@racksrv.net>> wrote:
I've modified the conf file to use the same IP that the other server used, no 
dice still:


Retrieving http://104.16.188.138/main.cvd
Trying to download http://104.16.188.138/main.cvd (IP: 104.16.188.138)
WARNING: getfile: Unknown response from 104.16.188.138 (IP: 104.16.188.138)
WARNING: Can't download main.cvd from 104.16.188.138

(different error/response as I'm, having to use the normal update method to 
ensure it uses the correct IP)


________________________________
From: clamav-users 
<clamav-users-boun...@lists.clamav.net<mailto:clamav-users-boun...@lists.clamav.net>>
 on behalf of Maarten Broekman 
<maarten.broek...@gmail.com<mailto:maarten.broek...@gmail.com>>
Sent: 28 August 2018 11:24
To: ClamAV users ML
Subject: Re: [clamav-users] ERROR 403: Forbidden


On Aug 28, 2018, at 06:17, Jon Roberts 
<j...@racksrv.net<mailto:j...@racksrv.net>> wrote:

>From the troubled server:

wget http://database.clamav.net/main-55.cdiff
--2018-08-28 11:14:43--  http://database.clamav.net/main-55.cdiff
Resolving database.clamav.net<http://database.clamav.net/>... 104.16.189.138, 
104.16.187.138, 104.16.188.138, ...
Connecting to 
database.clamav.net<http://database.clamav.net/>|104.16.189.138|:80... 
connected.
HTTP request sent, awaiting response... 403 Forbidden
2018-08-28 11:14:43 ERROR 403: Forbidden.

>From another server on the same network:

wget http://database.clamav.net/main-55.cdiff
--2018-08-28 11:16:15--  http://database.clamav.net/main-55.cdiff
Resolving database.clamav.net<http://database.clamav.net/>... 104.16.188.138, 
104.16.185.138, 104.16.186.138, ...
Connecting to 
database.clamav.net<http://database.clamav.net/>|104.16.188.138|:80... 
connected.
HTTP request sent, awaiting response... 200 OK
Length: 34736938 (33M) [application/octet-stream]
Saving to: `main-55.cdiff'



It seems like those machines are contacting two different IP addresses. The 
failure situation happened on 104.16.189.138 which the success situation had 
188 in the third octet (104.16.188.138).  Are you sure that the second machine 
was able to contact the 189 address successfully? Or that the first machine was 
also getting an error on the 188 address?

Any ideas? It looks like we're getting blocked but I'm not sure who to contact 
to have the issue rectified?

Regards, Jon


_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to