Topic: SME 9.2 freshclam update failed

[TerryF]

This is getting beyond a joke, still not resolving for me down here..

yes /usr/bin/refreshclam has been used 24, 12 hrs ago, and now..still borked

How to turn off failure email?

[Jean-Philippe Pialasse]

This is getting beyond a joke, still not resolving for me down here..

yes /usr/bin/refreshclam has been used 24, 12 hrs ago, and now..still borked

How to turn off failure email?

Disable email anti virus scan in server manager.

[TerryF]

Sweet - Ta

[TerryF]

Finally got it to update, added, just one server, another two still borked..FML :

https://forums.contribs.org/index.php/topic,49578.msg248940.html#msg248940

# Shutdown clam so clamd.socket file is removed
service clamd stop

# Navigate to clamav folder
cd /var/clamav

# Remove ALL files from folder to provide clean slate for update process
rm -f /var/clamav/* (you could skip the -f & confirm every file delete for safety)

# Restart clam
service clamd start

# Update sigs
freshclam -v (--no-dns can be used if just -v fails tho I haven't struck this issue)

Surprised the /usr/bin/refreshclam wasn't doing the job

[lloydh]

I'm still having no luck, it seems that all the database files have been removed from the Clamav web sites.       If I look at https://www.clamav.net/downloads and open the Virus Database link the three files are listed but clicking on any of them returns a 404 error.

If I do a freshclam -v it fails trying to connect to http://db.local.clamav.net/main.cvd, if I try wget I get the following.

wget http://db.local.clamav.net/main.cvd
--2017-08-25 10:02:22--  http://db.local.clamav.net/main.cvd
Resolving db.local.clamav.net... 193.1.193.64
Connecting to db.local.clamav.net|193.1.193.64|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
2017-08-25 10:02:22 ERROR 404: Not Found.

[TerryF]

I'm still having no luck, it seems that all the database files have been removed from the Clamav web sites

Yep still up the shite , managed to get one update to happen and have had no luck since..

[TerryF]

Disable email anti virus scan in server manager.

Na, doesn't stop the clam update failure email to admin...

[TerryF]

So:  http://blog.clamav.net/2017/08/cvd-download-issues-for-august-23-2017.html
and
http://lists.clamav.net/pipermail/clamav-users/2017-August/004990.html

Non techy speak, sit on your arse and wait
 

[Jean-Philippe Pialasse]

Na, doesn't stop the clam update failure email to admin...

My bad, i understood that you were not able to recieve or send email by "failure email", misread it to email failure.....

You could maybe ask a nfr as abug to have this logged instead of a mail... plus an email every day if it has failed for more 24h ie db older than 24h.

So:  http://blog.clamav.net/2017/08/cvd-download-issues-for-august-23-2017.html
and
http://lists.clamav.net/pipermail/clamav-users/2017-August/004990.html

Non techy speak, sit on your arse and wait

As i said earlier.

[TerryF]

While clam updates are mostly back now, still having occasional update failure .. pain in the !@#$

[michelandre]

Hi all,

A friend had same problem for two days. From my server, I copied /var/clamav/daily.cld to his server then freshclam -v.

All started working correctly; the files daily.cld and mirrors.dat got updated.

Michel-André

[guest22]

Michelandre,


maybe you can update this page https://wiki.contribs.org/Clamav:freshclam_update with you findings please?


TIA

[TerryF]

Clamav mailing lists..

This, put it in your bag of last option solutions..

http://lists.clamav.net/pipermail/clamav-users/2017-August/005014.html

Added :

For those of us living on the underside of the planet freshclam.conf has
DatabaseMirror db.local.clamav.net
DatabaseMirror database.clamav.net

Both resolve to only one ip 193.1.193.64 and that is being problematic, so whatever you do even using the wikis refreshclam it always resolves, for those in OZ, maybe NZ as well, to that ip, and as its up and down, so you get the update failures that are still happening down here.  Works for a while then borks again.

So I have done as suggested in the clamav ML, link above, and now pull from a german mirror

When the Oz mirror settles down and behaves I will reset the freshclam.conf back to its default settings

[TerryF]

Bloody hell, and when you go looking for location of that supposedly "local" ip,

inetnum:        193.1.193.0 - 193.1.193.127
org:            ORG-HA8-RIPE
netname:        HEANET-MIRROR
descr:          Network for ftp.heanet.ie services
descr:          Mirror Mirror on the wall who is the
descr:          fairest FTP server of them all
country:        IE

[ReetP]

As Terry pointed out this is an issue with clamav mirrors and is particularly bad for the upsidedowners.

It is well worth keeping an eye on the clamav list.