Re: [Clamav-users] Please help - Freshclam not updating.

2007-11-01 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Nov 01, 2007 at 08:02:58AM -0600, Milton Calnek wrote: With no other options, this smells like selinux. I second that. Yah... I'm a die hard RedHat fan... but I haven't had time to explore selinux, so when I build a system, I turn it off.

Re: [Clamav-users] Please help - Freshclam not updating.

2007-11-01 Thread Milton Calnek
Luca Gibelli wrote: Hello Todd, Check to make sure that your local iptables firewall and any firewall between you and the DNS server does not block TCP port 53 (which is what the fallback proto/port is if the DNS answer is more than 512 bytes). we put a lot of effort in keeping the size

Re: [Clamav-users] Please help - Freshclam not updating.

2007-10-31 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Oct 31, 2007 at 11:33:17AM -0600, Milton Calnek wrote: [EMAIL PROTECTED] ~]# host -t txt current.cvd.clamav.net current.cvd.clamav.net descriptive text 0.91.2:44:4641:1193798066:1 [EMAIL PROTECTED] ~]# host db.ca.clamav.net db.ca.clamav.net

Re: [Clamav-users] Please help - Freshclam not updating.

2007-10-31 Thread Rob MacGregor
On 10/31/07, Milton Calnek [EMAIL PROTECTED] wrote: Hello all, About a month or so ago, freshclam stopped working for me. At first I thought it might be a short outage, unfortunately that was not the case. First freshclams's query for current.cvd.clamav.net fails, but the query works when

Re: [Clamav-users] Please help - Freshclam not updating.

2007-10-31 Thread Luca Gibelli
Hello Todd, Check to make sure that your local iptables firewall and any firewall between you and the DNS server does not block TCP port 53 (which is what the fallback proto/port is if the DNS answer is more than 512 bytes). we put a lot of effort in keeping the size of the RR records under

Re: [Clamav-users] Please help - Freshclam not updating.

2007-10-31 Thread Luca Gibelli
Hello Rob, Any suggestions? Two things, 1) You may be able to go standard DNS lookups, but can you lookup TXT records? he explicitly showed that he can. Is DNS over TCP supported by your DNS server (many organisations block it in the mistaken belief that it improves security and