[clamav-users] Errors connecting to mirrors
Al Varnell
alvarnell at mac.com
Wed Mar 28 23:31:18 UTC 2018
On Wed, Mar 28, 2018 at 02:34 PM, Alex wrote:
> We're still seeing timeouts and abysmal transfer speeds. I don't know
> if it's related to the OP's issue.
>
> Retrieving http://db.us.clamav.net/safebrowsing-47190.cdiff <http://db.us.clamav.net/safebrowsing-47190.cdiff>
> Trying to download http://db.us.clamav.net/safebrowsing-47190.cdiff <http://db.us.clamav.net/safebrowsing-47190.cdiff>
> (IP: 150.214.142.197)
> WARNING: getfile: safebrowsing-47190.cdiff not found on
> db.us.clamav.net <http://db.us.clamav.net/> (IP: 150.214.142.197)
> WARNING: getpatch: Can't download safebrowsing-47190.cdiff from db.us.clamav.net <http://db.us.clamav.net/>
> Querying safebrowsing.47190.82.0.0.96D68EC5.ping.clamav.net <http://ping.clamav.net/>
> Retrieving http://db.us.clamav.net/safebrowsing-47190.cdiff <http://db.us.clamav.net/safebrowsing-47190.cdiff>
> nonblock_connect: connect timing out (30 secs)
> Can't connect to port 80 of host db.us.clamav.net <http://db.us.clamav.net/> (IP: 204.130.133.50)
> Trying host db.us.clamav.net <http://db.us.clamav.net/> (200.236.31.1)...
> Trying to download http://db.us.clamav.net/safebrowsing-47190.cdiff <http://db.us.clamav.net/safebrowsing-47190.cdiff>
> (IP: 200.236.31.1)
> WARNING: getfile: safebrowsing-47190.cdiff not found on
> db.us.clamav.net <http://db.us.clamav.net/> (IP: 200.236.31.1)
> WARNING: getpatch: Can't download safebrowsing-47190.cdiff from db.us.clamav.net <http://db.us.clamav.net/>
> Querying safebrowsing.47190.82.0.0.C8EC1F01.ping.clamav.net <http://c8ec1f01.ping.clamav.net/>
> Retrieving http://db.us.clamav.net/safebrowsing-47190.cdiff <http://db.us.clamav.net/safebrowsing-47190.cdiff>
> Trying to download http://db.us.clamav.net/safebrowsing-47190.cdiff <http://db.us.clamav.net/safebrowsing-47190.cdiff>
> (IP: 12.167.151.1)
I don't believe it's related. Your's appears to specifically involve a safebrowsing update that doesn't exist on either of those two mirrors, so apparently the main database updates are working OK?
> Ignoring mirror 150.214.142.197 (due to previous errors)
> Ignoring mirror 204.130.133.50 (due to previous errors)
> Ignoring mirror 155.98.64.87 (due to previous errors)
> Ignoring mirror 12.167.151.1 (due to previous errors)
> Ignoring mirror 12.167.151.2 (due to previous errors)
> Ignoring mirror 198.148.78.4 (due to previous errors)
> Ignoring mirror 72.21.91.8 (due to previous errors)
> Ignoring mirror 200.236.31.1 (due to previous errors)
Note that both the IP addresses used above are also on the Ignoring list.
This can be cured by deleting mirrors.dat, but may not solve your problem if that update isn't on any of them.
> nonblock_recv: recv timing out (30 secs)7%]
>
> It just keeps looping. Two systems on completely different parts of
> the Internet both connected connected to 12.167.151.1, as all others
> were unavailable.
>
> Is there a known current problem? Is there a site where we can go to
> check mirror status?
>
>
> On Tue, Mar 27, 2018 at 7:32 PM, Orion Poplawski <orion at nwra.com <mailto:orion at nwra.com>> wrote:
>> On 03/27/2018 05:21 PM, Al Varnell wrote:
>>> Using the same IP each time with failure will also cause mirrors.dat to temporarily block that IP's use for some period of time. That will require you to trash mirrors.dat and allow it to be rebuilt at the next check.
>>>
>>> -Al-
>>
>> I don't think mirrors.dat comes into play here as the proxy is doing the dns
>> lookup, not freshclam.
>>
>>>
>>> On Tue, Mar 27, 2018 at 03:40 PM, Orion Poplawski wrote:
>>>> On 03/27/2018 03:13 PM, Orion Poplawski wrote:
>>>>> Thanks for the response.
>>>>>
>>>>> I ended up switching freshclam to use our proxy servers and increasing the
>>>>> ConnectTimeout to 60 seconds. This has helped a bit, but I still get the
>>>>> occasional issue. Latest was trying to get daily-24426.cdiff from 72.21.91.8
>>>>> around Tue Mar 27 13:31:14 2018 PDT. These are annoying because they generate
>>>>> emails.
>>>>
>>>> This was exacerbated by squid continuing to use the same IP address for the
>>>> connection each time freshclam retried the download. I'm trying enabling
>>>> http://www.squid-cache.org/Doc/config/balance_on_multiple_ip/ <http://www.squid-cache.org/Doc/config/balance_on_multiple_ip/> <http://www.squid-cache.org/Doc/config/balance_on_multiple_ip/ <http://www.squid-cache.org/Doc/config/balance_on_multiple_ip/>> to see if that
>>>> helps.
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> clamav-users mailing list
>>> clamav-users at lists.clamav.net <mailto:clamav-users at lists.clamav.net>
>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>>
>>>
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>>
>>> http://www.clamav.net/contact.html#ml
>>>
>>
>>
>> --
>> Orion Poplawski
>> Manager of NWRA Technical Systems 720-772-5637
>> NWRA, Boulder/CoRA Office FAX: 303-415-9702
>> 3380 Mitchell Lane orion at nwra.com <mailto:orion at nwra.com>
>> Boulder, CO 80301 https://www.nwra.com/ <https://www.nwra.com/>
>> _______________________________________________
>> clamav-users mailing list
>> clamav-users at lists.clamav.net <mailto:clamav-users at lists.clamav.net>
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users <http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq <https://github.com/vrtadmin/clamav-faq>
>>
>> http://www.clamav.net/contact.html#ml <http://www.clamav.net/contact.html#ml>
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net <mailto:clamav-users at lists.clamav.net>
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users <http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq <https://github.com/vrtadmin/clamav-faq>
>
> http://www.clamav.net/contact.html#ml <http://www.clamav.net/contact.html#ml>
-Al-
--
Al Varnell
Mountain View, CA
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3860 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20180328/3a438102/attachment.bin>
More information about the clamav-users
mailing list