Mailing List Archive: ClamAV: users

Problem Running Freshclam

Index | Next | Previous | View Threaded

AHKAPLAN at PARTNERS

Mar 31, 2008, 5:45 AM

Post #1 of 5 (345 views)
Permalink

Problem Running Freshclam

Hi there -

I was checking the logs of one of our servers, and I discovered the automated
freshclam process failed

to update the virus definitions. I checked on the mirror-problem page, and went
through the motions of

renaming the mirrors.dat file, and manually running the freshclam utility with
the -v option. A new files

was created, and a diff command indicated there was no difference between the
new and original version

of the file. Even after I had done that, the error output appeared on-screen. An
excerpt of the output is

shown below:

Querying current.cvd.clamav.net

WARNING: Can't query current.cvd.clamav.net

WARNING: Invalid DNS reply. Falling back to HTTP mode.

Assuming modification time in the past

If-Modified-Since: Mon, 27 Dec 2004 03:52:10 GMT

Reading CVD header (main.cvd): ERROR: Can't get information about
database.clamav.net: Temporary DNS error

WARNING: Can't read main.cvd header from database.clamav.net (IP: )

Giving up on database.clamav.net...

Update failed. Your network may be down or none of the mirrors listed in
freshclam.conf is working.

Check http://www.clamav.net/support/mirror-problem for possible reasons.

I confirmed that DNS is operational on the system in question. The server is
running Fedora Core 7 as

its operating system. The version of ClamAV is 0.92.1, and it runs in
conjunction with SpamAssassin 3.2.4,

and MailScanner 4.64.3 on a Sendmail 8.14.1 release.

Does anyone have an idea of what needs to be done to correct this? Thanks.

The information transmitted in this electronic communication is intended only
for the person or entity to whom it is addressed and may contain confidential
and/or privileged material. Any review, retransmission, dissemination or other
use of or taking of any action in reliance upon this information by persons or
entities other than the intended recipient is prohibited. If you received this
information in error, please contact the Compliance HelpLine at 800-856-1983 and
properly dispose of this information.

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

edwintorok at gmail

Mar 31, 2008, 6:00 AM

Post #2 of 5 (329 views)
Permalink

Re: Problem Running Freshclam [In reply to]

Kaplan, Andrew H. wrote:
> Hi there -
>
>
>
> I was checking the logs of one of our servers, and I discovered the automated
> freshclam process failed
>
> to update the virus definitions. I checked on the mirror-problem page, and went
> through the motions of
>
> renaming the mirrors.dat file, and manually running the freshclam utility with
> the -v option. A new files
>
> was created, and a diff command indicated there was no difference between the
> new and original version
>
> of the file. Even after I had done that, the error output appeared on-screen. An
> excerpt of the output is
>
> shown below:
>
>
>
> Querying current.cvd.clamav.net
>
> WARNING: Can't query current.cvd.clamav.net
>
> WARNING: Invalid DNS reply. Falling back to HTTP mode.
>

What is the output of this:
host -t TXT current.cvd.clamav.net

> Assuming modification time in the past
>
> If-Modified-Since: Mon, 27 Dec 2004 03:52:10 GMT
>
> Reading CVD header (main.cvd): ERROR: Can't get information about
> database.clamav.net: Temporary DNS error
>
> WARNING: Can't read main.cvd header from database.clamav.net (IP: )
>

Can you ping database.clamav.net?
And what is the output of host database.clamav.net

Best regards,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

AHKAPLAN at PARTNERS

Mar 31, 2008, 9:40 AM

Post #3 of 5 (318 views)
Permalink

Re: Problem Running Freshclam [In reply to]

Hi there --

It appears the DNS server the server uses does not allow recursion.
Is it possible to configure the freshclam.conf file to connect via
the ip address of the database server, and if so what is the address
to use? Thanks.

-----Original Message-----
From: clamav-users-bounces [at] lists
[mailto:clamav-users-bounces [at] lists] On Behalf Of Török Edwin
Sent: Monday, March 31, 2008 9:01 AM
To: ClamAV users ML
Subject: Re: [Clamav-users] Problem Running Freshclam

Kaplan, Andrew H. wrote:
> Hi there -
>
>
>
> I was checking the logs of one of our servers, and I discovered the automated
> freshclam process failed
>
> to update the virus definitions. I checked on the mirror-problem page, and
went
> through the motions of
>
> renaming the mirrors.dat file, and manually running the freshclam utility with
> the -v option. A new files
>
> was created, and a diff command indicated there was no difference between the
> new and original version
>
> of the file. Even after I had done that, the error output appeared on-screen.
An
> excerpt of the output is
>
> shown below:
>
>
>
> Querying current.cvd.clamav.net
>
> WARNING: Can't query current.cvd.clamav.net
>
> WARNING: Invalid DNS reply. Falling back to HTTP mode.
>

What is the output of this:
host -t TXT current.cvd.clamav.net

> Assuming modification time in the past
>
> If-Modified-Since: Mon, 27 Dec 2004 03:52:10 GMT
>
> Reading CVD header (main.cvd): ERROR: Can't get information about
> database.clamav.net: Temporary DNS error
>
> WARNING: Can't read main.cvd header from database.clamav.net (IP: )
>

Can you ping database.clamav.net?
And what is the output of host database.clamav.net

Best regards,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

The information transmitted in this electronic communication is intended only
for the person or entity to whom it is addressed and may contain confidential
and/or privileged material. Any review, retransmission, dissemination or other
use of or taking of any action in reliance upon this information by persons or
entities other than the intended recipient is prohibited. If you received this
information in error, please contact the Compliance HelpLine at 800-856-1983 and
properly dispose of this information.

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

kwijibo at zianet

Mar 31, 2008, 10:00 AM

Post #4 of 5 (337 views)
Permalink

Re: Problem Running Freshclam [In reply to]

Kaplan, Andrew H. wrote:
> Hi there --
>
> It appears the DNS server the server uses does not allow recursion.
> Is it possible to configure the freshclam.conf file to connect via
> the ip address of the database server, and if so what is the address
> to use? Thanks.
>

You would be better off using a DNS server that allows you to recurse.
There are multiple IPs and I would imagine they could change at any
time.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

AHKAPLAN at PARTNERS

Mar 31, 2008, 10:04 AM

Post #5 of 5 (323 views)
Permalink

Re: Problem Running Freshclam [In reply to]

Hi there --

I spoke with our Information Security people, and I was able to
configure the system in question to resolve to a different set
of DNS servers. Once that was done, I reran freshclam, and this
time the update completed successfully.

-----Original Message-----
From: clamav-users-bounces [at] lists
[mailto:clamav-users-bounces [at] lists] On Behalf Of kwijibo [at] zianet
Sent: Monday, March 31, 2008 1:00 PM
To: ClamAV users ML
Subject: Re: [Clamav-users] Problem Running Freshclam

Kaplan, Andrew H. wrote:
> Hi there --
>
> It appears the DNS server the server uses does not allow recursion.
> Is it possible to configure the freshclam.conf file to connect via
> the ip address of the database server, and if so what is the address
> to use? Thanks.
>

You would be better off using a DNS server that allows you to recurse.
There are multiple IPs and I would imagine they could change at any
time.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

The information transmitted in this electronic communication is intended only
for the person or entity to whom it is addressed and may contain confidential
and/or privileged material. Any review, retransmission, dissemination or other
use of or taking of any action in reliance upon this information by persons or
entities other than the intended recipient is prohibited. If you received this
information in error, please contact the Compliance HelpLine at 800-856-1983 and
properly dispose of this information.

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads