Advanced
Mailing List Archive

Mailing List Archive

  1. Home >
  2. ClamAV>
  3. win32
[clamav-users] can not download updates
clamav-users at lists
Jul 27, 2021, 5:47 AM
Post #1 of 18 (2170 views)
Permalink
for a couple of weeks i've not been able to download updates. i get a message about on a cool down until a certain future date and time. when that date and time expires the next update get a message with a new future date and time. should i abandon all hope of getting updates?

Tue Jul 27 06:17:14 2021 -> Received signal: wake up
Tue Jul 27 06:17:14 2021 -> ClamAV update process started at Tue Jul 27 06:17:14 2021
Tue Jul 27 06:17:14 2021 -> WARNING: Your ClamAV installation is OUTDATED!
Tue Jul 27 06:17:14 2021 -> WARNING: Local version: 0.103.2 Recommended version: 0.103.3
Tue Jul 27 06:17:14 2021 -> DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
Tue Jul 27 06:17:14 2021 -> WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
Tue Jul 27 06:17:14 2021 -> This means that you have been rate limited by the CDN.
Tue Jul 27 06:17:14 2021 -> 1. Run FreshClam no more than once an hour to check for updates.
Tue Jul 27 06:17:14 2021 -> FreshClam should check DNS first to see if an update is needed.
Tue Jul 27 06:17:14 2021 -> 2. If you have more than 10 hosts on your network attempting to download,
Tue Jul 27 06:17:14 2021 -> it is recommended that you set up a private mirror on your network using
Tue Jul 27 06:17:14 2021 -> cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Tue Jul 27 06:17:14 2021 -> CDN and your own network.
Tue Jul 27 06:17:14 2021 -> 3. Please do not open a ticket asking for an exemption from the rate limit,
Tue Jul 27 06:17:14 2021 -> it will not be granted.
Tue Jul 27 06:17:14 2021 -> WARNING: You are still on cool-down until after: 2021-07-27 07:17:13
Tue Jul 27 06:17:14 2021 -> --------------------------------------
Tue Jul 27 07:17:14 2021 -> Received signal: wake up
Tue Jul 27 07:17:14 2021 -> ClamAV update process started at Tue Jul 27 07:17:14 2021
Tue Jul 27 07:17:14 2021 -> WARNING: Your ClamAV installation is OUTDATED!
Tue Jul 27 07:17:14 2021 -> WARNING: Local version: 0.103.2 Recommended version: 0.103.3
Tue Jul 27 07:17:14 2021 -> DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
Tue Jul 27 07:17:14 2021 -> WARNING: Cool-down expired, ok to try again.
Tue Jul 27 07:17:14 2021 -> daily database available for update (local version: 26231, remote version: 26245)
Tue Jul 27 07:17:15 2021 -> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
Tue Jul 27 07:17:15 2021 -> ERROR: downloadPatch: Can't apply patch
Tue Jul 27 07:17:15 2021 -> WARNING: Incremental update failed, trying to download daily.cvd
Tue Jul 27 07:17:16 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Tue Jul 27 07:17:16 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
Tue Jul 27 07:17:16 2021 -> This means that you have been rate limited by the CDN.
Tue Jul 27 07:17:16 2021 -> 1. Run FreshClam no more than once an hour to check for updates.
Tue Jul 27 07:17:16 2021 -> FreshClam should check DNS first to see if an update is needed.
Tue Jul 27 07:17:16 2021 -> 2. If you have more than 10 hosts on your network attempting to download,
Tue Jul 27 07:17:16 2021 -> it is recommended that you set up a private mirror on your network using
Tue Jul 27 07:17:16 2021 -> cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Tue Jul 27 07:17:16 2021 -> CDN and your own network.
Tue Jul 27 07:17:16 2021 -> 3. Please do not open a ticket asking for an exemption from the rate limit,
Tue Jul 27 07:17:16 2021 -> it will not be granted.
Tue Jul 27 07:17:16 2021 -> WARNING: You are on cool-down until after: 2021-07-27 11:17:16
Tue Jul 27 07:17:16 2021 -> main database available for update (local version: 59, remote version: 61)
Tue Jul 27 07:17:17 2021 -> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
Tue Jul 27 07:17:17 2021 -> ERROR: downloadPatch: Can't apply patch
Tue Jul 27 07:17:17 2021 -> WARNING: Incremental update failed, trying to download main.cvd
Tue Jul 27 07:17:19 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Tue Jul 27 07:17:19 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
Tue Jul 27 07:17:19 2021 -> This means that you have been rate limited by the CDN.
Tue Jul 27 07:17:19 2021 -> 1. Run FreshClam no more than once an hour to check for updates.
Tue Jul 27 07:17:19 2021 -> FreshClam should check DNS first to see if an update is needed.
Tue Jul 27 07:17:19 2021 -> 2. If you have more than 10 hosts on your network attempting to download,
Tue Jul 27 07:17:19 2021 -> it is recommended that you set up a private mirror on your network using
Tue Jul 27 07:17:19 2021 -> cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Tue Jul 27 07:17:19 2021 -> CDN and your own network.
Tue Jul 27 07:17:19 2021 -> 3. Please do not open a ticket asking for an exemption from the rate limit,
Tue Jul 27 07:17:19 2021 -> it will not be granted.
Tue Jul 27 07:17:19 2021 -> WARNING: You are on cool-down until after: 2021-07-27 11:17:19
Tue Jul 27 07:17:19 2021 -> bytecode.cld database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
Tue Jul 27 07:17:19 2021 -> --------------------------------------

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
uhlar at fantomas
Jul 27, 2021, 6:56 AM
Post #2 of 18 (2170 views)
Permalink
On 27.07.21 12:47, fxkl47BF via clamav-users wrote:
>for a couple of weeks i've not been able to download updates. i get a
> message about on a cool down until a certain future date and time. when
> that date and time expires the next update get a message with a new future
> date and time. should i abandon all hope of getting updates?

it's described here:

https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html

do you have multiple devices behind one IP address?

Do any of those devices download clamav database diferently then using
freshclam?


>Tue Jul 27 06:17:14 2021 -> Received signal: wake up
>Tue Jul 27 06:17:14 2021 -> ClamAV update process started at Tue Jul 27 06:17:14 2021
>Tue Jul 27 06:17:14 2021 -> WARNING: Your ClamAV installation is OUTDATED!
>Tue Jul 27 06:17:14 2021 -> WARNING: Local version: 0.103.2 Recommended version: 0.103.3
>Tue Jul 27 06:17:14 2021 -> DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
>Tue Jul 27 06:17:14 2021 -> WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
>Tue Jul 27 06:17:14 2021 -> This means that you have been rate limited by the CDN.
>Tue Jul 27 06:17:14 2021 -> 1. Run FreshClam no more than once an hour to check for updates.
>Tue Jul 27 06:17:14 2021 -> FreshClam should check DNS first to see if an update is needed.
>Tue Jul 27 06:17:14 2021 -> 2. If you have more than 10 hosts on your network attempting to download,
>Tue Jul 27 06:17:14 2021 -> it is recommended that you set up a private mirror on your network using
>Tue Jul 27 06:17:14 2021 -> cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
>Tue Jul 27 06:17:14 2021 -> CDN and your own network.
>Tue Jul 27 06:17:14 2021 -> 3. Please do not open a ticket asking for an exemption from the rate limit,
>Tue Jul 27 06:17:14 2021 -> it will not be granted.
>Tue Jul 27 06:17:14 2021 -> WARNING: You are still on cool-down until after: 2021-07-27 07:17:13
--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Boost your system's speed by 500% - DEL C:\WINDOWS\*.*

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 27, 2021, 7:22 AM
Post #3 of 18 (2170 views)
Permalink
??????? Original Message ???????

On Tuesday, July 27th, 2021 at 8:56 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:

> On 27.07.21 12:47, fxkl47BF via clamav-users wrote:
> > for a couple of weeks i've not been able to download updates. i get a
> > message about on a cool down until a certain future date and time. when
> > that date and time expires the next update get a message with a new future
> > date and time. should i abandon all hope of getting updates?
>
> it's described here:
> https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html
> do you have multiple devices behind one IP address?
> Do any of those devices download clamav database diferently then using
> freshclam?

i have one device that uses freshclam once per hour
i am using a vpn
it looks like anyone that uses a vpn is probably screwed
it was good while it lasted

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
uhlar at fantomas
Jul 27, 2021, 7:26 AM
Post #4 of 18 (2170 views)
Permalink
>> On 27.07.21 12:47, fxkl47BF via clamav-users wrote:
>> > for a couple of weeks i've not been able to download updates. i get a
>> > message about on a cool down until a certain future date and time. when
>> > that date and time expires the next update get a message with a new future
>> > date and time. should i abandon all hope of getting updates?

>On Tuesday, July 27th, 2021 at 8:56 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
>> it's described here:
>> https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html
>> do you have multiple devices behind one IP address?
>> Do any of those devices download clamav database diferently then using
>> freshclam?

On 27.07.21 14:22, fxkl47BF via clamav-users wrote:
>i have one device that uses freshclam once per hour
>i am using a vpn

why are you using a VPN for downloading virus definitions?

>it looks like anyone that uses a vpn is probably screwed

I wouldn't say so, depends on what VPN.

>it was good while it lasted

yes, but people were abusing the service, that's why it got rate limited
--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
(R)etry, (A)bort, (C)ancer

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 27, 2021, 7:29 AM
Post #5 of 18 (2170 views)
Permalink
> On Jul 27, 2021, at 10:22 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
>
> On Tuesday, July 27th, 2021 at 8:56 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk <mailto:uhlar@fantomas.sk>> wrote:
>
>> On 27.07.21 12:47, fxkl47BF via clamav-users wrote:
>>> for a couple of weeks i've not been able to download updates. i get a
>>> message about on a cool down until a certain future date and time. when
>>> that date and time expires the next update get a message with a new future
>>> date and time. should i abandon all hope of getting updates?
>>
>> it's described here:
>> https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html <https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html>
>> do you have multiple devices behind one IP address?
>> Do any of those devices download clamav database diferently then using
>> freshclam?
>
> i have one device that uses freshclam once per hour
> i am using a vpn
> it looks like anyone that uses a vpn is probably screwed
> it was good while it lasted

What is your public IP?

--
Joel Esler
Manager, Communities Division
Cisco Talos Intelligence Group
https://www.talosintelligence.com | https://www.snort.org | https://www.clamav.net

Attached Files:

Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 27, 2021, 7:34 AM
Post #6 of 18 (2170 views)
Permalink
??????? Original Message ???????
On Tuesday, July 27th, 2021 at 9:29 AM, Joel Esler (jesler) <jesler@cisco.com> wrote:

> > On Jul 27, 2021, at 10:22 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
> >
> > On Tuesday, July 27th, 2021 at 8:56 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
> >
> > > On 27.07.21 12:47, fxkl47BF via clamav-users wrote:
> > >
> > > > for a couple of weeks i've not been able to download updates. i get a
> > > > message about on a cool down until a certain future date and time. when
> > > > that date and time expires the next update get a message with a new future
> > > > date and time. should i abandon all hope of getting updates?
> > >
> > > it's described here:
> > > https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html
> > > do you have multiple devices behind one IP address?
> > > Do any of those devices download clamav database diferently then using
> > > freshclam?
> >
> > i have one device that uses freshclam once per hour
> > i am using a vpn
> > it looks like anyone that uses a vpn is probably screwed
> > it was good while it lasted
>
> What is your public IP?

199.229.250.132

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 27, 2021, 7:36 AM
Post #7 of 18 (2170 views)
Permalink
??????? Original Message ???????

On Tuesday, July 27th, 2021 at 9:26 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:

> > > On 27.07.21 12:47, fxkl47BF via clamav-users wrote:
> > >
> > > > for a couple of weeks i've not been able to download updates. i get a
> > > > message about on a cool down until a certain future date and time. when
> > > > that date and time expires the next update get a message with a new future
> > > > date and time. should i abandon all hope of getting updates?
>
> > On Tuesday, July 27th, 2021 at 8:56 AM, Matus UHLAR - fantomas uhlar@fantomas.sk wrote:
> >
> > > it's described here:
> > > https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html
> > > do you have multiple devices behind one IP address?
> > > Do any of those devices download clamav database diferently then using
> > > freshclam?
>
> On 27.07.21 14:22, fxkl47BF via clamav-users wrote:
>
> > i have one device that uses freshclam once per hour
> > i am using a vpn
>
> why are you using a VPN for downloading virus definitions?

my whole network is routed through a vpn

> > it looks like anyone that uses a vpn is probably screwed
>
> I wouldn't say so, depends on what VPN.
>
> > it was good while it lasted
>
> yes, but people were abusing the service, that's why it got rate limited


_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 27, 2021, 7:43 AM
Post #8 of 18 (2170 views)
Permalink
> On Jul 27, 2021, at 10:34 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
>
> ??????? Original Message ???????
> On Tuesday, July 27th, 2021 at 9:29 AM, Joel Esler (jesler) <jesler@cisco.com <mailto:jesler@cisco.com>> wrote:
>
>>> On Jul 27, 2021, at 10:22 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
>>>
>>> On Tuesday, July 27th, 2021 at 8:56 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
>>>
>>>> On 27.07.21 12:47, fxkl47BF via clamav-users wrote:
>>>>
>>>>> for a couple of weeks i've not been able to download updates. i get a
>>>>> message about on a cool down until a certain future date and time. when
>>>>> that date and time expires the next update get a message with a new future
>>>>> date and time. should i abandon all hope of getting updates?
>>>>
>>>> it's described here:
>>>> https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html
>>>> do you have multiple devices behind one IP address?
>>>> Do any of those devices download clamav database diferently then using
>>>> freshclam?
>>>
>>> i have one device that uses freshclam once per hour
>>> i am using a vpn
>>> it looks like anyone that uses a vpn is probably screwed
>>> it was good while it lasted
>>
>> What is your public IP?
>
> 199.229.250.132

You’re rate limited because you have one machine behind that IP that has attempted to download the daily.cvd 50x in the last 24 hours, and the main.cvd another 50x. Let alone the latest cdiff that it’s attempted to download 80x.

It’s not more than one machine, it’s a single machine.

--
Joel Esler
Manager, Communities Division
Cisco Talos Intelligence Group
https://www.talosintelligence.com | https://www.snort.org | https://www.clamav.net

Attached Files:

Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 27, 2021, 8:17 AM
Post #9 of 18 (2170 views)
Permalink
??????? Original Message ???????

On Tuesday, July 27th, 2021 at 9:43 AM, Joel Esler (jesler) <jesler@cisco.com> wrote:

> > On Jul 27, 2021, at 10:34 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
> >
> > ??????? Original Message ???????
> >
> > On Tuesday, July 27th, 2021 at 9:29 AM, Joel Esler (jesler) <jesler@cisco.com> wrote:
> >
> > > > On Jul 27, 2021, at 10:22 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
> > > >
> > > > On Tuesday, July 27th, 2021 at 8:56 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
> > > >
> > > > > On 27.07.21 12:47, fxkl47BF via clamav-users wrote:
> > > > >
> > > > > > for a couple of weeks i've not been able to download updates. i get a
> > > > > >
> > > > > > message about on a cool down until a certain future date and time. when
> > > > > >
> > > > > > that date and time expires the next update get a message with a new future
> > > > > >
> > > > > > date and time. should i abandon all hope of getting updates?
> > > > >
> > > > > it's described here:
> > > > >
> > > > > https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html
> > > > >
> > > > > do you have multiple devices behind one IP address?
> > > > >
> > > > > Do any of those devices download clamav database diferently then using
> > > > >
> > > > > freshclam?
> > > >
> > > > i have one device that uses freshclam once per hour
> > > >
> > > > i am using a vpn
> > > >
> > > > it looks like anyone that uses a vpn is probably screwed
> > > >
> > > > it was good while it lasted
> > >
> > > What is your public IP?
> >
> > 199.229.250.132
>
> You’re rate limited because you have one machine behind that IP that has attempted to download the daily.cvd 50x in the last 24 hours, and the main.cvd another 50x. Let alone the latest cdiff that it’s attempted to download 80x.
>
> It’s not more than one machine, it’s a single machine.

maybe i don't fully understand how this vpn works
i understood that this would be the ip address for anyone using this exit point
i have two machines
one is my work machine and has clamav
the other runs a cnc mill that hasn't been on for several days
i can send my whole freshclam log if it helps
maybe something needs to be changed in my config

this is /etc/clamav/freshclam.conf

# Automatically created by the clamav-freshclam postinst
# Comments will get lost when you reconfigure the clamav-freshclam package

DatabaseOwner clamav
UpdateLogFile /var/log/clamav/freshclam.log
LogVerbose false
LogSyslog false
LogFacility LOG_LOCAL6
LogFileMaxSize 0
LogRotate true
LogTime true
Foreground false
Debug false
MaxAttempts 5
DatabaseDirectory /var/lib/clamav
DNSDatabaseInfo current.cvd.clamav.net
ConnectTimeout 30
ReceiveTimeout 30
TestDatabases yes
ScriptedUpdates yes
CompressLocalDatabase no
Bytecode true
NotifyClamd /etc/clamav/clamd.conf
# Check for new database 24 times a day
Checks 24
DatabaseMirror db.local.clamav.net
DatabaseMirror database.clamav.net


_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 27, 2021, 8:28 AM
Post #10 of 18 (2170 views)
Permalink
Maybe try raising your receivetimeout? https://blog.clamav.net/2021/07/psa-freshclam-database-download-issue.html <https://blog.clamav.net/2021/07/psa-freshclam-database-download-issue.html>



> On Jul 27, 2021, at 11:17 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
>
> ??????? Original Message ???????
>
> On Tuesday, July 27th, 2021 at 9:43 AM, Joel Esler (jesler) <jesler@cisco.com <mailto:jesler@cisco.com>> wrote:
>
>>> On Jul 27, 2021, at 10:34 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
>>>
>>> ??????? Original Message ???????
>>>
>>> On Tuesday, July 27th, 2021 at 9:29 AM, Joel Esler (jesler) <jesler@cisco.com> wrote:
>>>
>>>>> On Jul 27, 2021, at 10:22 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
>>>>>
>>>>> On Tuesday, July 27th, 2021 at 8:56 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
>>>>>
>>>>>> On 27.07.21 12:47, fxkl47BF via clamav-users wrote:
>>>>>>
>>>>>>> for a couple of weeks i've not been able to download updates. i get a
>>>>>>>
>>>>>>> message about on a cool down until a certain future date and time. when
>>>>>>>
>>>>>>> that date and time expires the next update get a message with a new future
>>>>>>>
>>>>>>> date and time. should i abandon all hope of getting updates?
>>>>>>
>>>>>> it's described here:
>>>>>>
>>>>>> https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html
>>>>>>
>>>>>> do you have multiple devices behind one IP address?
>>>>>>
>>>>>> Do any of those devices download clamav database diferently then using
>>>>>>
>>>>>> freshclam?
>>>>>
>>>>> i have one device that uses freshclam once per hour
>>>>>
>>>>> i am using a vpn
>>>>>
>>>>> it looks like anyone that uses a vpn is probably screwed
>>>>>
>>>>> it was good while it lasted
>>>>
>>>> What is your public IP?
>>>
>>> 199.229.250.132
>>
>> You’re rate limited because you have one machine behind that IP that has attempted to download the daily.cvd 50x in the last 24 hours, and the main.cvd another 50x. Let alone the latest cdiff that it’s attempted to download 80x.
>>
>> It’s not more than one machine, it’s a single machine.
>
> maybe i don't fully understand how this vpn works
> i understood that this would be the ip address for anyone using this exit point
> i have two machines
> one is my work machine and has clamav
> the other runs a cnc mill that hasn't been on for several days
> i can send my whole freshclam log if it helps
> maybe something needs to be changed in my config
>
> this is /etc/clamav/freshclam.conf
>
> # Automatically created by the clamav-freshclam postinst
> # Comments will get lost when you reconfigure the clamav-freshclam package
>
> DatabaseOwner clamav
> UpdateLogFile /var/log/clamav/freshclam.log
> LogVerbose false
> LogSyslog false
> LogFacility LOG_LOCAL6
> LogFileMaxSize 0
> LogRotate true
> LogTime true
> Foreground false
> Debug false
> MaxAttempts 5
> DatabaseDirectory /var/lib/clamav
> DNSDatabaseInfo current.cvd.clamav.net <http://current.cvd.clamav.net/>
> ConnectTimeout 30
> ReceiveTimeout 30
> TestDatabases yes
> ScriptedUpdates yes
> CompressLocalDatabase no
> Bytecode true
> NotifyClamd /etc/clamav/clamd.conf
> # Check for new database 24 times a day
> Checks 24
> DatabaseMirror db.local.clamav.net <http://db.local.clamav.net/>
> DatabaseMirror database.clamav.net <http://database.clamav.net/>
>
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net <mailto:clamav-users@lists.clamav.net>
> https://lists.clamav.net/mailman/listinfo/clamav-users <https://lists.clamav.net/mailman/listinfo/clamav-users>
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq <https://github.com/vrtadmin/clamav-faq>
>
> http://www.clamav.net/contact.html#ml <http://www.clamav.net/contact.html#ml>

Attached Files:

Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 27, 2021, 8:46 AM
Post #11 of 18 (2170 views)
Permalink
??????? Original Message ???????
On Tuesday, July 27th, 2021 at 10:28 AM, Joel Esler (jesler) <jesler@cisco.com> wrote:

> Maybe try raising your receivetimeout?  https://blog.clamav.net/2021/07/psa-freshclam-database-download-issue.html

i changed the receivetimeout to 300 as described in the article
i'll see what happens after the cool down ends

>
> > On Jul 27, 2021, at 11:17 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
> >
> > ??????? Original Message ???????
> >
> > On Tuesday, July 27th, 2021 at 9:43 AM, Joel Esler (jesler) <jesler@cisco.com> wrote:
> >
> > > > On Jul 27, 2021, at 10:34 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
> > > >
> > > > ??????? Original Message ???????
> > > >
> > > > On Tuesday, July 27th, 2021 at 9:29 AM, Joel Esler (jesler) <jesler@cisco.com> wrote:
> > > >
> > > > > > On Jul 27, 2021, at 10:22 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
> > > > > >
> > > > > > On Tuesday, July 27th, 2021 at 8:56 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
> > > > > >
> > > > > > > On 27.07.21 12:47, fxkl47BF via clamav-users wrote:
> > > > > > >
> > > > > > > > for a couple of weeks i've not been able to download updates. i get a
> > > > > > > >
> > > > > > > > message about on a cool down until a certain future date and time. when
> > > > > > > >
> > > > > > > > that date and time expires the next update get a message with a new future
> > > > > > > >
> > > > > > > > date and time. should i abandon all hope of getting updates?
> > > > > > >
> > > > > > > it's described here:
> > > > > > >
> > > > > > > https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html
> > > > > > >
> > > > > > > do you have multiple devices behind one IP address?
> > > > > > >
> > > > > > > Do any of those devices download clamav database diferently then using
> > > > > > >
> > > > > > > freshclam?
> > > > > >
> > > > > > i have one device that uses freshclam once per hour
> > > > > >
> > > > > > i am using a vpn
> > > > > >
> > > > > > it looks like anyone that uses a vpn is probably screwed
> > > > > >
> > > > > > it was good while it lasted
> > > > >
> > > > > What is your public IP?
> > > >
> > > > 199.229.250.132
> > >
> > > You’re rate limited because you have one machine behind that IP that has attempted to download the daily.cvd 50x in the last 24 hours, and the main.cvd another 50x. Let alone the latest cdiff that it’s attempted to download 80x.
> > >
> > > It’s not more than one machine, it’s a single machine.
> >
> > maybe i don't fully understand how this vpn works
> > i understood that this would be the ip address for anyone using this exit point
> > i have two machines
> > one is my work machine and has clamav
> > the other runs a cnc mill that hasn't been on for several days
> > i can send my whole freshclam log if it helps
> > maybe something needs to be changed in my config
> >
> > this is /etc/clamav/freshclam.conf
> >
> > # Automatically created by the clamav-freshclam postinst
> > # Comments will get lost when you reconfigure the clamav-freshclam package
> >
> > DatabaseOwner clamav
> > UpdateLogFile /var/log/clamav/freshclam.log
> > LogVerbose false
> > LogSyslog false
> > LogFacility LOG_LOCAL6
> > LogFileMaxSize 0
> > LogRotate true
> > LogTime true
> > Foreground false
> > Debug false
> > MaxAttempts 5
> > DatabaseDirectory /var/lib/clamav
> > DNSDatabaseInfocurrent.cvd.clamav.net
> > ConnectTimeout 30
> > ReceiveTimeout 30
> > TestDatabases yes
> > ScriptedUpdates yes
> > CompressLocalDatabase no
> > Bytecode true
> > NotifyClamd /etc/clamav/clamd.conf
> > # Check for new database 24 times a day
> > Checks 24
> > DatabaseMirrordb.local.clamav.net
> > DatabaseMirrordatabase.clamav.net
> >
> > _______________________________________________
> >
> > clamav-users mailing list
> > clamav-users@lists.clamav.net
> > https://lists.clamav.net/mailman/listinfo/clamav-users
> >
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 27, 2021, 9:37 AM
Post #12 of 18 (2170 views)
Permalink
??????? Original Message ???????

On Tuesday, July 27th, 2021 at 10:46 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:

> ??????? Original Message ???????
>
> On Tuesday, July 27th, 2021 at 10:28 AM, Joel Esler (jesler) jesler@cisco.com wrote:
>
> > Maybe try raising your receivetimeout?  https://blog.clamav.net/2021/07/psa-freshclam-database-download-issue.html
>
> i changed the receivetimeout to 300 as described in the article
> i'll see what happens after the cool down ends

it made no difference

Tue Jul 27 11:34:03 2021 -> Received signal: wake up
Tue Jul 27 11:34:03 2021 -> ClamAV update process started at Tue Jul 27 11:34:03 2021
Tue Jul 27 11:34:03 2021 -> WARNING: Your ClamAV installation is OUTDATED!
Tue Jul 27 11:34:03 2021 -> WARNING: Local version: 0.103.2 Recommended version: 0.103.3
Tue Jul 27 11:34:03 2021 -> DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
Tue Jul 27 11:34:03 2021 -> WARNING: Cool-down expired, ok to try again.
Tue Jul 27 11:34:03 2021 -> daily database available for update (local version: 26231, remote version: 26245)
Tue Jul 27 11:34:05 2021 -> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
Tue Jul 27 11:34:05 2021 -> ERROR: downloadPatch: Can't apply patch
Tue Jul 27 11:34:05 2021 -> WARNING: Incremental update failed, trying to download daily.cvd
Tue Jul 27 11:34:06 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Tue Jul 27 11:34:06 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
Tue Jul 27 11:34:06 2021 -> This means that you have been rate limited by the CDN.
Tue Jul 27 11:34:06 2021 -> 1. Run FreshClam no more than once an hour to check for updates.
Tue Jul 27 11:34:06 2021 -> FreshClam should check DNS first to see if an update is needed.
Tue Jul 27 11:34:06 2021 -> 2. If you have more than 10 hosts on your network attempting to download,
Tue Jul 27 11:34:06 2021 -> it is recommended that you set up a private mirror on your network using
Tue Jul 27 11:34:06 2021 -> cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Tue Jul 27 11:34:06 2021 -> CDN and your own network.
Tue Jul 27 11:34:06 2021 -> 3. Please do not open a ticket asking for an exemption from the rate limit,
Tue Jul 27 11:34:06 2021 -> it will not be granted.
Tue Jul 27 11:34:06 2021 -> WARNING: You are on cool-down until after: 2021-07-27 15:34:06
Tue Jul 27 11:34:06 2021 -> main database available for update (local version: 59, remote version: 61)
Tue Jul 27 11:34:07 2021 -> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
Tue Jul 27 11:34:07 2021 -> ERROR: downloadPatch: Can't apply patch
Tue Jul 27 11:34:07 2021 -> WARNING: Incremental update failed, trying to download main.cvd
Tue Jul 27 11:34:07 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Tue Jul 27 11:34:07 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
Tue Jul 27 11:34:07 2021 -> This means that you have been rate limited by the CDN.
Tue Jul 27 11:34:07 2021 -> 1. Run FreshClam no more than once an hour to check for updates.
Tue Jul 27 11:34:07 2021 -> FreshClam should check DNS first to see if an update is needed.
Tue Jul 27 11:34:07 2021 -> 2. If you have more than 10 hosts on your network attempting to download,
Tue Jul 27 11:34:07 2021 -> it is recommended that you set up a private mirror on your network using
Tue Jul 27 11:34:07 2021 -> cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Tue Jul 27 11:34:07 2021 -> CDN and your own network.
Tue Jul 27 11:34:07 2021 -> 3. Please do not open a ticket asking for an exemption from the rate limit,
Tue Jul 27 11:34:07 2021 -> it will not be granted.
Tue Jul 27 11:34:07 2021 -> WARNING: You are on cool-down until after: 2021-07-27 15:34:07
Tue Jul 27 11:34:07 2021 -> bytecode.cld database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
Tue Jul 27 11:34:07 2021 -> --------------------------------------



>
> > > On Jul 27, 2021, at 11:17 AM, fxkl47BF via clamav-users clamav-users@lists.clamav.net wrote:
> > >
> > > ??????? Original Message ???????
> > >
> > > On Tuesday, July 27th, 2021 at 9:43 AM, Joel Esler (jesler) jesler@cisco.com wrote:
> > >
> > > > > On Jul 27, 2021, at 10:34 AM, fxkl47BF via clamav-users clamav-users@lists.clamav.net wrote:
> > > > >
> > > > > ??????? Original Message ???????
> > > > >
> > > > > On Tuesday, July 27th, 2021 at 9:29 AM, Joel Esler (jesler) jesler@cisco.com wrote:
> > > > >
> > > > > > > On Jul 27, 2021, at 10:22 AM, fxkl47BF via clamav-users clamav-users@lists.clamav.net wrote:
> > > > > > >
> > > > > > > On Tuesday, July 27th, 2021 at 8:56 AM, Matus UHLAR - fantomas uhlar@fantomas.sk wrote:
> > > > > > >
> > > > > > > > On 27.07.21 12:47, fxkl47BF via clamav-users wrote:
> > > > > > > >
> > > > > > > > > for a couple of weeks i've not been able to download updates. i get a
> > > > > > > > >
> > > > > > > > > message about on a cool down until a certain future date and time. when
> > > > > > > > >
> > > > > > > > > that date and time expires the next update get a message with a new future
> > > > > > > > >
> > > > > > > > > date and time. should i abandon all hope of getting updates?
> > > > > > > >
> > > > > > > > it's described here:
> > > > > > > >
> > > > > > > > https://lists.clamav.net/pipermail/clamav-users/2021-March/010544.html
> > > > > > > >
> > > > > > > > do you have multiple devices behind one IP address?
> > > > > > > >
> > > > > > > > Do any of those devices download clamav database diferently then using
> > > > > > > >
> > > > > > > > freshclam?
> > > > > > >
> > > > > > > i have one device that uses freshclam once per hour
> > > > > > >
> > > > > > > i am using a vpn
> > > > > > >
> > > > > > > it looks like anyone that uses a vpn is probably screwed
> > > > > > >
> > > > > > > it was good while it lasted
> > > > > >
> > > > > > What is your public IP?
> > > > >
> > > > > 199.229.250.132
> > > >
> > > > You’re rate limited because you have one machine behind that IP that has attempted to download the daily.cvd 50x in the last 24 hours, and the main.cvd another 50x. Let alone the latest cdiff that it’s attempted to download 80x.
> > > >
> > > > It’s not more than one machine, it’s a single machine.
> > >
> > > maybe i don't fully understand how this vpn works
> > >
> > > i understood that this would be the ip address for anyone using this exit point
> > >
> > > i have two machines
> > >
> > > one is my work machine and has clamav
> > >
> > > the other runs a cnc mill that hasn't been on for several days
> > >
> > > i can send my whole freshclam log if it helps
> > >
> > > maybe something needs to be changed in my config
> > >
> > > this is /etc/clamav/freshclam.conf
> > >
> > > Automatically created by the clamav-freshclam postinst
> > > ======================================================
> > >
> > > Comments will get lost when you reconfigure the clamav-freshclam package
> > > ========================================================================
> > >
> > > DatabaseOwner clamav
> > >
> > > UpdateLogFile /var/log/clamav/freshclam.log
> > >
> > > LogVerbose false
> > >
> > > LogSyslog false
> > >
> > > LogFacility LOG_LOCAL6
> > >
> > > LogFileMaxSize 0
> > >
> > > LogRotate true
> > >
> > > LogTime true
> > >
> > > Foreground false
> > >
> > > Debug false
> > >
> > > MaxAttempts 5
> > >
> > > DatabaseDirectory /var/lib/clamav
> > >
> > > DNSDatabaseInfocurrent.cvd.clamav.net
> > >
> > > ConnectTimeout 30
> > >
> > > ReceiveTimeout 30
> > >
> > > TestDatabases yes
> > >
> > > ScriptedUpdates yes
> > >
> > > CompressLocalDatabase no
> > >
> > > Bytecode true
> > >
> > > NotifyClamd /etc/clamav/clamd.conf
> > >
> > > Check for new database 24 times a day
> > > =====================================
> > >
> > > Checks 24
> > >
> > > DatabaseMirrordb.local.clamav.net
> > >
> > > DatabaseMirrordatabase.clamav.net
> > >
> > > clamav-users mailing list
> > >
> > > clamav-users@lists.clamav.net
> > >
> > > https://lists.clamav.net/mailman/listinfo/clamav-users
> > >
> > > Help us build a comprehensive ClamAV guide:
> > >
> > > https://github.com/vrtadmin/clamav-faq
> > >
> > > http://www.clamav.net/contact.html#ml
>
> clamav-users mailing list
>
> clamav-users@lists.clamav.net
>
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
> Help us build a comprehensive ClamAV guide:
>
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
uhlar at fantomas
Jul 27, 2021, 9:51 AM
Post #13 of 18 (2170 views)
Permalink
>> On Tuesday, July 27th, 2021 at 10:28 AM, Joel Esler (jesler) jesler@cisco.com wrote:
>> > Maybe try raising your receivetimeout? ?https://blog.clamav.net/2021/07/psa-freshclam-database-download-issue.html

>On Tuesday, July 27th, 2021 at 10:46 AM, fxkl47BF via clamav-users <clamav-users@lists.clamav.net> wrote:
>> i changed the receivetimeout to 300 as described in the article
>> i'll see what happens after the cool down ends

On 27.07.21 16:37, fxkl47BF via clamav-users wrote:
>it made no difference
>
>Tue Jul 27 11:34:03 2021 -> Received signal: wake up
>Tue Jul 27 11:34:03 2021 -> ClamAV update process started at Tue Jul 27 11:34:03 2021
>Tue Jul 27 11:34:03 2021 -> WARNING: Your ClamAV installation is OUTDATED!
>Tue Jul 27 11:34:03 2021 -> WARNING: Local version: 0.103.2 Recommended version: 0.103.3
>Tue Jul 27 11:34:03 2021 -> DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
>Tue Jul 27 11:34:03 2021 -> WARNING: Cool-down expired, ok to try again.
>Tue Jul 27 11:34:03 2021 -> daily database available for update (local version: 26231, remote version: 26245)
>Tue Jul 27 11:34:05 2021 -> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
>Tue Jul 27 11:34:05 2021 -> ERROR: downloadPatch: Can't apply patch
>Tue Jul 27 11:34:05 2021 -> WARNING: Incremental update failed, trying to download daily.cvd
>Tue Jul 27 11:34:06 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
>Tue Jul 27 11:34:06 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).

you weren't unblocked by changing receivetimeout.

wait until you are unblocked (up to 24 hours) and then you should be able to
download the file.

what's your bandwidth? the receive can take longer than 5 minutes./
How many machines in your network?
If more than one, creating local mirror should be better.


--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux IS user friendly, it's just selective who its friends are...

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 27, 2021, 10:15 AM
Post #14 of 18 (2169 views)
Permalink
Hi there,

On Tue, 27 Jul 2021, Matus UHLAR - fantomas wrote:
> On Tuesday, July 27th, 2021 at 10:46 AM, fxkl47BF wrote:
>> On Tuesday, July 27th, 2021 at 10:28 AM, Joel Esler wrote:
>>
>>> Maybe try raising your receivetimeout?
>>
>> i changed the receivetimeout to 300 as described in the article ...
>
> ... the receive can take longer than 5 minutes....

Here on the end of the bit of wet string supplied by British Telecom
I had to change my receive timeout from half an hour to an hour:

$ grep -i timeout /etc/mail/clamav/freshclam.conf
ConnectTimeout 600
ReceiveTimeout 3600

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 27, 2021, 11:51 AM
Post #15 of 18 (2169 views)
Permalink
??????? Original Message ???????

On Tuesday, July 27th, 2021 at 11:51 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:

> > > On Tuesday, July 27th, 2021 at 10:28 AM, Joel Esler (jesler) jesler@cisco.com wrote:
> > >
> > > > Maybe try raising your receivetimeout?  https://blog.clamav.net/2021/07/psa-freshclam-database-download-issue.html
>
> > On Tuesday, July 27th, 2021 at 10:46 AM, fxkl47BF via clamav-users clamav-users@lists.clamav.net wrote:
> >
> > > i changed the receivetimeout to 300 as described in the article
> > >
> > > i'll see what happens after the cool down ends
>
> On 27.07.21 16:37, fxkl47BF via clamav-users wrote:
>
> > it made no difference
> >
> > Tue Jul 27 11:34:03 2021 -> Received signal: wake up
> > Tue Jul 27 11:34:03 2021 -> ClamAV update process started at Tue Jul 27 11:34:03 2021
> > Tue Jul 27 11:34:03 2021 -> WARNING: Your ClamAV installation is OUTDATED!
> > Tue Jul 27 11:34:03 2021 -> WARNING: Local version: 0.103.2 Recommended version: 0.103.3
> > Tue Jul 27 11:34:03 2021 -> DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
> > Tue Jul 27 11:34:03 2021 -> WARNING: Cool-down expired, ok to try again.
> > Tue Jul 27 11:34:03 2021 -> daily database available for update (local version: 26231, remote version: 26245)
> > Tue Jul 27 11:34:05 2021 -> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> > Tue Jul 27 11:34:05 2021 -> ERROR: downloadPatch: Can't apply patch
> > Tue Jul 27 11:34:05 2021 -> WARNING: Incremental update failed, trying to download daily.cvd
> > Tue Jul 27 11:34:06 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
> > Tue Jul 27 11:34:06 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
>
> you weren't unblocked by changing receivetimeout.
> wait until you are unblocked (up to 24 hours) and then you should be able to
> download the file.
> what's your bandwidth? the receive can take longer than 5 minutes./

for many years it's worked fine with timeout set at 30 seconds


> How many machines in your network?

two
only one has clamav


> If more than one, creating local mirror should be better.


_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
uhlar at fantomas
Jul 28, 2021, 1:04 AM
Post #16 of 18 (2169 views)
Permalink
>> On 27.07.21 16:37, fxkl47BF via clamav-users wrote:
>>
>> > it made no difference
>> >
>> > Tue Jul 27 11:34:03 2021 -> Received signal: wake up
>> > Tue Jul 27 11:34:03 2021 -> ClamAV update process started at Tue Jul 27 11:34:03 2021
>> > Tue Jul 27 11:34:03 2021 -> WARNING: Your ClamAV installation is OUTDATED!
>> > Tue Jul 27 11:34:03 2021 -> WARNING: Local version: 0.103.2 Recommended version: 0.103.3
>> > Tue Jul 27 11:34:03 2021 -> DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
>> > Tue Jul 27 11:34:03 2021 -> WARNING: Cool-down expired, ok to try again.
>> > Tue Jul 27 11:34:03 2021 -> daily database available for update (local version: 26231, remote version: 26245)
>> > Tue Jul 27 11:34:05 2021 -> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
>> > Tue Jul 27 11:34:05 2021 -> ERROR: downloadPatch: Can't apply patch
>> > Tue Jul 27 11:34:05 2021 -> WARNING: Incremental update failed, trying to download daily.cvd
>> > Tue Jul 27 11:34:06 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
>> > Tue Jul 27 11:34:06 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).

>On Tuesday, July 27th, 2021 at 11:51 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
>> you weren't unblocked by changing receivetimeout.
>> wait until you are unblocked (up to 24 hours) and then you should be able to
>> download the file.
>> what's your bandwidth? the receive can take longer than 5 minutes./

On 27.07.21 18:51, fxkl47BF via clamav-users wrote:
>for many years it's worked fine with timeout set at 30 seconds

for many years it worked with people fetching via wget/curl, but it does not
apply now.


...changing timeout won't help you when you are banned, servers don't know
about your timeout settings (but will ban you if you repeatedly drop
connection because of timeout)

Your last info available was:

Tue Jul 27 11:34:07 2021 -> WARNING: You are on cool-down until after: 2021-07-27 15:34:07

hopefully it's OK now.

--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux - It's now safe to turn on your computer.
Linux - Teraz mozete pocitac bez obav zapnut.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 28, 2021, 4:35 AM
Post #17 of 18 (2168 views)
Permalink
??????? Original Message ???????

On Wednesday, July 28th, 2021 at 3:04 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:

> > On Tuesday, July 27th, 2021 at 11:51 AM, Matus UHLAR - fantomas uhlar@fantomas.sk wrote:
> >
> > > you weren't unblocked by changing receivetimeout.
> > >
> > > wait until you are unblocked (up to 24 hours) and then you should be able to
> > >
> > > download the file.
> > >
> > > what's your bandwidth? the receive can take longer than 5 minutes./
>
> On 27.07.21 18:51, fxkl47BF via clamav-users wrote:
>
> > for many years it's worked fine with timeout set at 30 seconds
>
> for many years it worked with people fetching via wget/curl, but it does not
> apply now.
> ...changing timeout won't help you when you are banned, servers don't know
> about your timeout settings (but will ban you if you repeatedly drop
> connection because of timeout)
> Your last info available was:
> Tue Jul 27 11:34:07 2021 -> WARNING: You are on cool-down until after: 2021-07-27 15:34:07
> hopefully it's OK now.

it seems my ban was lifted when freshclam ran Tue Jul 27 19:34:16 2021
but i was getting timeout with receivetimeout set at 5 minutes
this morning i increased it to 20 minutes and it succeeded
30 seconds to 20 minutes

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: [clamav-users] can not download updates [ In reply to ]
clamav-users at lists
Jul 28, 2021, 8:57 AM
Post #18 of 18 (2168 views)
Permalink
> On Jul 28, 2021, at 4:04 AM, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
>
> On 27.07.21 18:51, fxkl47BF via clamav-users wrote:
>> for many years it's worked fine with timeout set at 30 seconds
>
> for many years it worked with people fetching via wget/curl, but it does not
> apply now.
>

So true.

>
> ...changing timeout won't help you when you are banned, servers don't know
> about your timeout settings (but will ban you if you repeatedly drop
> connection because of timeout)

No, but a lot of the repeated queries (causing the ban) is because the timeout is reached pre-maturely, and extending the download time allows for more time to download the file, which cuts down on the repeated queries.

Attached Files:

©2024 GT.net. A Gossamer Threads company.
5th Floor, 455 Granville St., Vancouver, BC V6C 1T1, Canada | Legal