[clamav-users] Freshclam failure - Still ongoing???

Sat Aug 26 03:28:45 UTC 2017

Can do, as it looks like AU only has 1 mirror anyway. I'll check the $$ side of things to provide it.

Get back to you on this Joel.

--

Thanks

Paul Dean.

"Life is not WHAT you make it, it's WHO you have in it..."

On Fri, 25 Aug 2017 08:50:05 -0700
Dennis Peterson <dennispe at inetnw.com> wrote:

>Are you not able to create your own mirror?
>
>dp
>
>On 8/25/17 8:48 AM, Paul Dean wrote:
>> Hi,
>>
>> Thanks for the info, but doing this across several groups of servers is not really suitable. But that said, if there is no viable fix in the next day or so, then this might be the only solution.
>>
>> Does anyone have a list of confirmed working mirrors?
>>
>> Thanks Joel for getting onto this, let me know if I can help somehow.
>>
>> --
>>
>>
>> Thanks
>>
>> Paul Dean.
>>
>> "Life is not WHAT you make it, it's WHO you have in it..."
>>
>>
>> On Fri, 25 Aug 2017 07:43:08 -0700
>> Dennis Peterson <dennispe at inetnw.com> wrote:
>>  
>>> You don't need ClamAV ppl to help - you have complete control over this process. Try this:
>>>
>>> Find a healthy mirror
>>> Put that healthy mirror's IP address in your freshclam.conf file as the first definition of DatabaseMirror
>>> Run freshclam manually.
>>>
>>> grep ^DatabaseMirror freshclam.conf
>>>
>>> You should see a host name such as db.de.clamav.net. Use the host or nslookup command to expand that to reveal all the round-robin IP addresses. It looks like this (as of this moment):
>>>
>>> host db.de.clamav.net
>>>
>>> db.de.clamav.net has address 195.30.97.3
>>> db.de.clamav.net has address 212.227.138.145
>>> db.de.clamav.net has address 213.174.32.130
>>> db.de.clamav.net has address 5.9.253.237
>>> db.de.clamav.net has address 62.27.56.14
>>> db.de.clamav.net has address 62.201.161.84
>>> db.de.clamav.net has address 62.245.181.53
>>> db.de.clamav.net has address 84.39.110.99
>>> db.de.clamav.net has address 88.198.17.100
>>> db.de.clamav.net has address 130.133.110.67
>>> db.de.clamav.net has address 144.76.28.11
>>> db.de.clamav.net has address 178.63.73.246
>>> db.de.clamav.net has address 193.27.49.165
>>>
>>> Ping each of these hosts to see which ones respond. Use geoiplookup or similar tool to find which healthy sites are located near you. No point trying to poll a site around the world from you. If you don't have a geoip tool then notice the response time of each mirror's successful ping. The lower the time the better suited it could be for you.
>>>
>>> Choose an IP that looks promising. Put that in your freshclam.conf file and run freshclam. For example:
>>>
>>> DatabaseMirror 195.30.97.3
>>>
>>> Remember this is a temporary fix - don't depend on this configuration to work in the long run. Undo it when the ClamAV ppl fix the mirrors problem.
>>>
>>> As an aside try some diagnostics - run freshclam manually:
>>> freshclam --list-mirrors
>>>
>>> This will give you a list of mirrors and their health. On the report I see some of the mirrors have never responded, others respond about 50% of the time. If you see a mirror that is 100% successful you can use that in your freshclam.conf file. It would be helpful if the ClamAV ppl would remove the bad actors from the DNS records.
>>>
>>> If none of this makes sense then do nothing and wait for the ClamAV ppl. Better safe than sorry.
>>>
>>> dp
>>>
>>>
>>>
>>>
>>> On 8/25/17 2:14 AM, Paul Dean wrote:  
>>>> Oh shoot.... ClamAV ppl, help please...
>>>>
>>>> --
>>>>
>>>>
>>>> Thanks
>>>>
>>>> Paul Dean.
>>>>
>>>> "Life is not WHAT you make it, it's WHO you have in it..."
>>>>
>>>>
>>>> On Fri, 25 Aug 2017 10:47:23 +0200
>>>> maxal <mn at sbg.at> wrote:  
>>>>   >>>> hi,  
>>>>>
>>>>> yes, this is ongoing as there are numerous broken mirrors in different
>>>>> country zones out there, eg german zone db.de.clamav.net:
>>>>>
>>>>> db.de.clamav.net has address 62.201.161.84 -> OK
>>>>> db.de.clamav.net has address 195.30.97.3 -> OK
>>>>> db.de.clamav.net has address 130.133.110.67 -> OK
>>>>> db.de.clamav.net has address 212.227.138.145 -> OK
>>>>> db.de.clamav.net has
>>>>> address 62.27.56.14 -> OK
>>>>> db.de.clamav.net has address 62.245.181.53 ->
>>>>> OK
>>>>> db.de.clamav.net has address 193.27.49.165 -> OK
>>>>> db.de.clamav.net has address 88.198.17.100 -> FAIL
>>>>> db.de.clamav.net has address 84.39.110.99 -> FAIL
>>>>> db.de.clamav.net has address 144.76.28.11 -> FAIL
>>>>> db.de.clamav.net has address 213.174.32.130 -> FAIL
>>>>> db.de.clamav.net has address 5.9.253.237 -> FAIL
>>>>> db.de.clamav.net has address 178.63.73.246 -> FAIL
>>>>>
>>>>> regards
>>>>> max
>>>>>
>>>>>
>>>>> On Fri, 2017-08-25 at 16:24 +0800, Paul Dean wrote:  
>>>>>> Hi,
>>>>>>
>>>>>> I've checked the lists and nuked the mirror.dat file as suggested,
>>>>>> but still getting failure on dling daily-23699.cdiff via freshclam.
>>>>>> Also tried via wget, and got a 404 error. So currently I'm stuck on
>>>>>> 23698.
>>>>>>
>>>>>> Also nuked all .cld files and still failed.
>>>>>>
>>>>>> I've got a few servers/machines that use ClamAV, so hoping a overall
>>>>>> fix instead of each machine would be preferable.
>>>>>>
>>>>>> All machines are based in AU and failures happen with
>>>>>> db.local.clamav.net and database.clamav.net.
>>>>>>
>>>>>> _______________________________________________
>>>>>> clamav-users mailing list
>>>>>> clamav-users at lists.clamav.net
>>>>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>>>>>
>>>>>>
>>>>>> Help us build a comprehensive ClamAV guide:
>>>>>> https://github.com/vrtadmin/clamav-faq
>>>>>>
>>>>>> http://www.clamav.net/contact.html#ml  
>>>>> _______________________________________________
>>>>> clamav-users mailing list
>>>>> clamav-users at lists.clamav.net
>>>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>>>>
>>>>>
>>>>> Help us build a comprehensive ClamAV guide:
>>>>> https://github.com/vrtadmin/clamav-faq
>>>>>
>>>>> http://www.clamav.net/contact.html#ml  
>>>>
>>>>
>>>> _______________________________________________
>>>> clamav-users mailing list
>>>> clamav-users at lists.clamav.net
>>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>>>
>>>>
>>>> Help us build a comprehensive ClamAV guide:
>>>> https://github.com/vrtadmin/clamav-faq
>>>>
>>>> http://www.clamav.net/contact.html#ml  
>>>
>>> _______________________________________________
>>> clamav-users mailing list
>>> clamav-users at lists.clamav.net
>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>>
>>>
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>>
>>> http://www.clamav.net/contact.html#ml  
>>
>>
>>
>> _______________________________________________
>> clamav-users mailing list
>> clamav-users at lists.clamav.net
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml  
>
>
>_______________________________________________
>clamav-users mailing list
>clamav-users at lists.clamav.net
>http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
>Help us build a comprehensive ClamAV guide:
>https://github.com/vrtadmin/clamav-faq
>
>http://www.clamav.net/contact.html#ml

-- 

Thanks

Paul Dean.

"Life is not WHAT you make it, it's WHO you have in it..."
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20170826/2ff92f43/attachment.sig>