Koozali.org: home of the SME Server

ClamAV "bloccato"

Offline Fumetto

  • *
  • 899
  • +1/-0
ClamAV "bloccato"
« on: December 22, 2015, 12:52:06 PM »
SME8.2 updated. Da un 4/5 girni ricevo le mail con oggetto "freshclam: Update failed".
Normalmente spariscono dopo 2/3 giorni ma ho avuto la malaugurata idea di tentare di risolvere a mano...

Seguendo la guida del wiki ho tentato eseguendo /usr/bin/refreshclam ma senza risultato. E' come se non riuscisse a scaricare i file dal sito di clamav

Update failed. Your network may be down or none of the mirrors listed in /etc/freshclam.conf is working...

Siccome sono testardo ho provato a eseguire "a mano" il metodo 1, ma con scarsi risultati; inoltre, avendo eliminato i file in /var/clamav/ il  risultato che ho ottenuto è stato di "imputtanare" clamav che non trovando più i file necessari al suo funzionamento ha bloccato totalmente la posta. Sono tornato "alla normalità" disabilitando la scansione antivirus da server manager.

Qualcuno si è già scontrato con il problema? quello che mi par strano è quel messaggio "connect_error: getsockopt(SO_ERROR): fd=3 error=111: Connection refused"...
Quote
login as: root
root@192.168.16.220's password:
Last login: Tue Dec 22 12:15:10 2015 from 192.168.16.250
************ Welcome to SME Server 8.2 *************

Before editing configuration files, familiarise
yourself with the automated events and templates
systems.

Please take the time to read the documentation
http://wiki.contribs.org/Main_Page

Remember that SME Server is free to download
and use, but it is not free to build

Please help the project :
http://wiki.contribs.org/Donate

****************************************************
[root@server ~]# service clamd status
down: /service/clamd: 1s, want up; run: log: (pid 1685) 11664s
[root@server ~]# freshclam -v
Current working dir is /var/clamav
Max retries == 6
ClamAV update process started at Tue Dec 22 12:39:34 2015
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1800
Software version from DNS: 0.99
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.98.7 Recommended version: 0.99
DON'T PANIC! Read http://www.clamav.net/support/faq
Retrieving http://db.local.clamav.net/main.cvd
Ignoring mirror 213.92.8.5 (due to previous errors)
Ignoring mirror 193.206.139.34 (due to previous errors)
Ignoring mirror 213.92.8.5 (due to previous errors)
Ignoring mirror 193.206.139.34 (due to previous errors)
WARNING: Can't download main.cvd from db.local.clamav.net
Trying again in 5 secs...
...
ClamAV update process started at Tue Dec 22 12:39:59 2015
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1775
Software version from DNS: 0.99
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.98.7 Recommended version: 0.99
DON'T PANIC! Read http://www.clamav.net/support/faq
Retrieving http://db.local.clamav.net/main.cvd
Ignoring mirror 213.92.8.5 (due to previous errors)
Ignoring mirror 193.206.139.34 (due to previous errors)
ERROR: Can't download main.cvd from db.local.clamav.net
Giving up on db.local.clamav.net...
ClamAV update process started at Tue Dec 22 12:39:59 2015
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1775
Software version from DNS: 0.99
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.98.7 Recommended version: 0.99
DON'T PANIC! Read http://www.clamav.net/support/faq
Retrieving http://database.clamav.net/main.cvd
Ignoring mirror 213.92.8.5 (due to previous errors)
Ignoring mirror 193.206.139.34 (due to previous errors)
ERROR: Can't download main.cvd from database.clamav.net
Giving up on database.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in /etc/freshclam.conf is working. Check http://www.clamav.net/doc/mirrors-faq.html for possible reasons.
Quote
[root@server ~]# /usr/bin/refreshclam
Current working dir is /var/clamav
Max retries == 6
ClamAV update process started at Tue Dec 22 12:47:23 2015
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1331
Software version from DNS: 0.99
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.98.7 Recommended version: 0.99
DON'T PANIC! Read http://www.clamav.net/support/faq
Retrieving http://db.local.clamav.net/main.cvd
connect_error: getsockopt(SO_ERROR): fd=3 error=111: Connection refused
Can't connect to port 80 of host db.local.clamav.net (IP: 193.206.139.34)
Ignoring mirror 193.206.139.34 (due to previous errors)
Trying host db.local.clamav.net (213.92.8.5)...
nonblock_connect: connect timing out (30 secs)
Can't connect to port 80 of host db.local.clamav.net (IP: 213.92.8.5)
WARNING: Can't download main.cvd from db.local.clamav.net
Trying again in 5 secs...
...
ClamAV update process started at Tue Dec 22 12:48:18 2015
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1276
Software version from DNS: 0.99
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.98.7 Recommended version: 0.99
DON'T PANIC! Read http://www.clamav.net/support/faq
Retrieving http://database.clamav.net/main.cvd
Ignoring mirror 193.206.139.34 (due to previous errors)
Ignoring mirror 213.92.8.5 (due to previous errors)
ERROR: Can't download main.cvd from database.clamav.net
Giving up on database.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in /etc/freshclam.conf is working. Check http://www.clamav.net/doc/mirrors-faq.html for possible reasons.
[root@server ~]#

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: ClamAV "bloccato"
« Reply #1 on: December 22, 2015, 12:58:12 PM »
è un problema di clamav.net:
database.clamav.net è irragiungibile o sovraccarico, e penso sia lo stesso per altri hosts della loro rete (il sito www.clamav.net funziona)

Offline Fumetto

  • *
  • 899
  • +1/-0
Re: ClamAV "bloccato"
« Reply #2 on: December 22, 2015, 01:32:37 PM »
E se copiassi il contenuto della cartella /var/clamav/ da un altro server sul server dove ho cancellato i files potrei riabilitare la scansione?

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: ClamAV "bloccato"
« Reply #3 on: December 22, 2015, 02:00:21 PM »
Dovrebbe andare.. occhio ai permessi