Koozali.org formerly Contribs.org
Legacy Forums => General Discussion (Legacy) => Topic started by: djhomeless on February 01, 2005, 09:32:23 AM
-
I'm getting email reports from the cron manager complaining that it is unable to query current.cvd.clamav.net.
The logs report the following:
ERROR: Can't query current.cvd.clamav.net
WARNING: Invalid DNS reply. Falling back to HTTP mode.
main.cvd is up to date (version: 29, sigs: 29086, f-level: 3, builder: tomek)
daily.cvd is up to date (version: 694, sigs: 979, f-level: 4, builder: ccordes)
So it seems it can't resolve the domain, but can at the IP?? Is there a way to point it to a domain closer to home (I live in the UK). Barring that, since it seems the process is succeeding can I disable the warnings?? :)
Thanks in advance,
Geoffrey
-
I bet just waiting until tomorrow will make the prob disappear.
-
I started seeing this error yesterday morning. I'll give it another day though....
thanks,
Geoffrey
-
You've already set the "country for database update" in server manager -> Antivirus to your country?
-
I set it in the server panel to UK, which is why I thought it odd that is was still polling the US.
Any idea how to set it from the command line?
thanks!
Geoffrey
-
No, but to make the changes effective, you have to save and restart ClamAV. I fear that you have already done that either. Try "service clamd restart" on the console and see if that makes a diffrence.
-
I'm pretty sure I tried it, but I'll do it again.
Hopefully that will do the trick!
thanks,
Geoffrey
-
Any changes?
-
No. :(
This is really weird. I'm going to dig around and find the command line flags to set the mirror directly.
Its just a minor annoyance I suppose since it does succeed in polling the IP directly.
Still weird that it can't resolve the DNS...
Geoffrey
-
Don't know if this helps...
Apparently, there is no A record for current.cvd.clamav.net
cvd.clamav.net works fine. So - if anyone knows where to change this on the SME - please let us know.
I'm having this problem on 2 systems.
-
Hmm,
According to the ClamAV FAQ, I'm having a problem with my DNS Server.
http://www.clamav.net/faq.html
The faq advises to run the following:
host -t txt current.cvd.clamav.net
When I do so, I get:
[root@domain root]# host -t txt current.cvd.clamav.net
;; connection timed out; no servers could be reached
The FAQ goes on to say that If I can't resolve the above URL, then my DNS is 'broken'. In addition, I should check my /etc/resolve.conf file for the correct entries.
Does anyone know how I can go about testing whether DNS is not working properly? In the short term, would anyone recommend adding a template fragment to add the IP of current.cvd.clamav.net to resolve.conf?
Thanks All,
Geoffrey
-
Same as last post ... started yesterday after manually updating clam.
freshclam worked prior to doing this.
Now :-
[root@server root]# host -t txt current.cvd.clamav.net
Host current.cvd.clamav.net not found: 2(SERVFAIL)
I can ping current.cvd.clamav.net fine ?
[root@server root]# freshclam -v
Current working dir is /usr/share/clamav
Max retries == 6
ClamAV update process started at Sun May 14 10:01:50 2006
Querying current.cvd.clamav.net
ERROR: Can't query current.cvd.clamav.net
WARNING: Invalid DNS reply. Falling back to HTTP mode.
Connected to db.uk.clamav.net (IP: 193.1.193.64).
Trying to retrieve http://db.uk.clamav.net/main.cvd
If-Modified-Since: Sun, 30 Apr 2006 11:51:56 GMT
Reading CVD header (main.cvd): OK (IMS)
main.cvd is up to date (version: 38, sigs: 51206, f-level: 7, builder: tkojm)
Connected to db.uk.clamav.net (IP: 193.1.193.64).
Trying to retrieve http://db.uk.clamav.net/daily.cvd
If-Modified-Since: Fri, 12 May 2006 21:32:09 GMT
Reading CVD header (daily.cvd): OK (IMS)
daily.cvd is up to date (version: 1461, sigs: 3843, f-level: 8, builder: ccordes)
Freeing option list...done
I restarted clamd so will see if the message reported in the above post persists ...
Edit: added upstream ISP dns to resolv.conf seems to have cured this
however am now getting other errors following weekly scan of entire system :-
LibClamAV Warning: Ignoring empty field in " charset="
LibClamAV Warning: Multipart MIME message contains no boundaries
LibClamAV Warning: Multipart MIME message contains no boundaries
LibClamAV Warning: Multipart MIME message contains no boundaries
LibClamAV Warning: messageFindArgument: no '=' sign found in MIME header
LibClamAV Warning: messageFindArgument: no '=' sign found in MIME header
Beginning to wish I had never bothered manually updating (it was only to fix a minor error)
Anyone help here ?