The same problem happens to me now when trying to update from 26012 to 26013 version
I was trying to wget directly from each IP (104.16.218.84, 104.16.219.8)  and still I'm getting 26012 version from them.
maybe this relates to the fact `scriptUpdates no`? even though the server should be configure that way base on clamav's docs

On Wed, Dec 9, 2020 at 1:13 PM G.W. Haywood via clamav-users <clamav-users@lists.clamav.net> wrote:
Hi there,

On Wed, 9 Dec 2020, Gal Cohen wrote:

> 5. here are the full logs of the latest update failure (26011 -> 26012),freshclam run takes 19 sec
> Tue Dec  8 22:00:02 2020 -> ClamAV update process started at Tue Dec  8 22:00:02 2020
> ...
> Tue Dec  8 22:00:02 2020 -> *check_for_new_database_version: Local copy of daily found: daily.cvd.
> Tue Dec  8 22:00:02 2020 -> *query_remote_database_version: daily.cvd version from DNS: 26012
> Tue Dec  8 22:00:02 2020 -> daily database available for update (local version: 26011, remote version: 26012)
> Tue Dec  8 22:00:02 2020 -> *Retrieving https://database.clamav.net/daily.cvd
> Tue Dec  8 22:00:02 2020 -> *downloadFile: Download source: https://database.clamav.net/daily.cvd
> Tue Dec  8 22:00:02 2020 -> *downloadFile: Download destination: /data/tmp.7624b/clamav-cde3734f56b3b9351a0261c3b140966f.tmp
> *   Trying 104.16.218.84:443...

This is one of the IPs which I was expecting to see.  I wouldn't expect any
problems with it, our ClamAV server updated from it at 1818 GMT last night.

Maybe you have a proxy between you and the Cloudflare servers which is caching
the data downloads?  Try downloading the 'daily' file with 'wget' from several
different places and check which versions you receive.

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml