Re: [clamav-users] ClamAV Virus Definition Update Problem

[Matteo Dessalvi]

Hello.

On the logs you posted I can see the following line:

[...] freshclam[5948]: Connecting via 10.93.220.10

It means this system is trying to reach the ClamAV mirrors
through a proxy (which I guess is internal, since you
are using an IP address belonging to the RFC1918 private
network range).

Could it be that the timeout is caused by this proxy?
You said there's only one system affected: since all
the other systems share the same configuration
(as you wrote) I guess you can also check on the
proxy side what is going on.

Best regards,
   Matteo

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV Virus Definition Update Problem

[Sébastien Tête]

Yes, Al Varnell

That could be true. It doesn't look like he is using it.

I added this to the configuration file, because in the sources, there is
the freshclam example config file, which got this comment:

# database.clamav.net is a round-robin record which points to our most
# reliable mirrors. It's used as a fall back in case db.XY.clamav.net is


So I thought it might help adding it. Seem he did not fall back to that
server.

I will remove it, and if it helps I'll inform, but i doubt that.

Actually on this system the default settings were running.
Then I changed them to what I posted, with the goal ClamAV beeing less
sensitive for update failures, before it triggeres the error.

Any other ideas ?

regards
Sébastien Tete


Am 13.01.2017 um 12:38 schrieb Al Varnell:
> Is there some reason you feel the need to include these? I've found the 
> default setting to work just fine for most users. In any case, I don't 
> believe I've ever heard of anybody using three settings for DatabaseMirror.  
> From the log, it doesn't appear that it ever uses the third (default) setting.
> 
> -Al-
> 
> 
> 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
> 
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV Virus Definition Update Problem

[Al Varnell]

Is there some reason you feel the need to include these? I've found the default 
setting to work just fine for most users. In any case, I don't believe I've 
ever heard of anybody using three settings for DatabaseMirror.  From the log, 
it doesn't appear that it ever uses the third (default) setting.

-Al-
-- 
ClamXav User

On Fri, Jan 13, 2017 at 03:17 AM, Sébastien Tête wrote:
> 
> DatabaseMirror db.de.clamav.net
> DatabaseMirror db.local.clamav.net



smime.p7s
Description: S/MIME cryptographic signature
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] ClamAV Virus Definition Update Problem

[Sébastien Tête]

Hi ClamAV users,

I cannot figure out, why ClamAV fails to update the virus definitions.
Maybe you can help

I already did a lot of research with google.

What I have running:

ClamAV 0.99.2/22884/Fri Jan 13 09:07:47 2017
Not running in daemon mode. Executing freshclam cron controlled.
With each "--on-error-execute" a scripts deletes the mirrors.dat

This is the content of freshclam.conf:

DatabaseDirectory /var/clamav
UpdateLogFile /var/log/clamav/freshclam.log
LogSyslog yes
LogTime yes
LogVerbose no
Debug no
PidFile /var/run/freshclam.pid
DatabaseOwner clamav
DatabaseMirror db.de.clamav.net
DatabaseMirror db.local.clamav.net
DatabaseMirror database.clamav.net
MaxAttempts 8
ConnectTimeout 60
ReceiveTimeout 60
Checks 12

Output from an update try, after resetting virus definitions files and
also deleting mirros file:

Jan  8 13:07:56 System freshclam[5948]: ClamAV update process started at
Sun Jan  8 13:07:56 2017
Jan  8 13:07:56 System freshclam[5948]: Connecting via 10.93.220.10
Jan  8 13:07:56 System freshclam[5948]: main.cvd is up to date (version:
57, sigs: 4218790, f-level: 60, builder: amishhammer)
Jan  8 13:07:56 System freshclam[5948]: Connecting via 10.93.220.10
Jan  8 13:07:57 System freshclam[5948]: getfile: daily-22857.cdiff not
found on db.de.clamav.net
Jan  8 13:07:57 System freshclam[5948]: getpatch: Can't download
daily-22857.cdiff from db.de.clamav.net
Jan  8 13:07:57 System freshclam[5948]: getfile: daily-22857.cdiff not
found on db.de.clamav.net
Jan  8 13:07:57 System freshclam[5948]: getpatch: Can't download
daily-22857.cdiff from db.de.clamav.net
Jan  8 13:07:57 System freshclam[5948]: getfile: daily-22857.cdiff not
found on db.de.clamav.net
Jan  8 13:07:57 System freshclam[5948]: getpatch: Can't download
daily-22857.cdiff from db.de.clamav.net
Jan  8 13:07:57 System freshclam[5948]: Incremental update failed,
trying to download daily.cvd
Jan  8 13:08:11 System freshclam[5948]: Downloading daily.cvd [100%]
Jan  8 13:08:15 System freshclam[5948]: Mirror 10.93.220.10 is not
synchronized.
Jan  8 13:08:15 System freshclam[5948]: Trying again in 5 secs...
Jan  8 13:08:20 System freshclam[5948]: ClamAV update process started at
Sun Jan  8 13:08:20 2017
Jan  8 13:08:20 System freshclam[5948]: Connecting via 10.93.220.10
Jan  8 13:08:20 System freshclam[5948]: main.cvd is up to date (version:
57, sigs: 4218790, f-level: 60, builder: amishhammer)
Jan  8 13:08:20 System freshclam[5948]: Connecting via 10.93.220.10
Jan  8 13:08:21 System freshclam[5948]: getfile: daily-22857.cdiff not
found on db.de.clamav.net
Jan  8 13:08:21 System freshclam[5948]: getpatch: Can't download
daily-22857.cdiff from db.de.clamav.net
Jan  8 13:08:21 System freshclam[5948]: getfile: daily-22857.cdiff not
found on db.de.clamav.net
Jan  8 13:08:21 System freshclam[5948]: getpatch: Can't download
daily-22857.cdiff from db.de.clamav.net
Jan  8 13:08:21 System freshclam[5948]: getfile: daily-22857.cdiff not
found on db.de.clamav.net
Jan  8 13:08:21 System freshclam[5948]: getpatch: Can't download
daily-22857.cdiff from db.de.clamav.net
Jan  8 13:08:21 System freshclam[5948]: Incremental update failed,
trying to download daily.cvd
Jan  8 13:08:33 System freshclam[5948]: Downloading daily.cvd [100%]
Jan  8 13:08:36 System freshclam[5948]: Mirror 10.93.220.10 is not
synchronized.
Jan  8 13:08:36 System freshclam[5948]: Giving up on db.de.clamav.net...
Jan  8 13:08:36 System freshclam[5948]: ClamAV update process started at
Sun Jan  8 13:08:36 2017
Jan  8 13:08:36 System freshclam[5948]: Connecting via 10.93.220.10
Jan  8 13:08:36 System freshclam[5948]: main.cvd is up to date (version:
57, sigs: 4218790, f-level: 60, builder: amishhammer)
Jan  8 13:08:36 System freshclam[5948]: Connecting via 10.93.220.10
Jan  8 13:09:07 System freshclam[5948]: nonblock_recv: recv timing out
(30 secs)
Jan  8 13:09:07 System freshclam[5948]: getfile: Error while reading
database from db.local.clamav.net: Operation now in progress
Jan  8 13:09:07 System freshclam[5948]: getpatch: Can't download
daily-22857.cdiff from db.local.clamav.net
Jan  8 13:09:37 System freshclam[5948]: nonblock_recv: recv timing out
(30 secs)
Jan  8 13:09:37 System freshclam[5948]: getfile: Error while reading
database from db.local.clamav.net: Operation now in progress
Jan  8 13:09:37 System freshclam[5948]: getpatch: Can't download
daily-22857.cdiff from db.local.clamav.net
Jan  8 13:10:07 System freshclam[5948]: nonblock_recv: recv timing out
(30 secs)
Jan  8 13:10:07 System freshclam[5948]: getfile: Error while reading
database from db.local.clamav.net: Operation now in progress
Jan  8 13:10:07 System freshclam[5948]: getpatch: Can't download
daily-22857.cdiff from db.local.clamav.net
Jan  8 13:10:07 System freshclam[5948]: Incremental update failed,
trying to download daily.cvd
Jan  8 13:10:37 System freshclam[5948]: nonblock_recv: recv timing out
(30 secs)
Jan  8 13:10:37 System freshclam[5948]: getfile: Error while reading
database from db.local.clamav.net: Opera