Mailing List Archive

Hi there,

On Mon, 8 Aug 2022, Ganesh Kachare, Vodafone (External) via clamav-users wrote:

> I am trying to download the clamav updates from private local mirror on my custom clamav alpine docker image and I am keep getting ^downloadFile: Unexpected response (502) error from freshclam.
>
> Its not able to download main.cvd, daily.cvd, bytecode.cvd and eventually my pod fails after maximum retry. I did tried increasing timeouts and disabling it in freshclam.conf file but it did not work.
>
> I have validated my proxy and private mirror server and they are able to connect with alpine clamav docker image.
>
> Does anyone face similar issue.. I am using clamav and freshclam v0.104.3-r0 on alpine 3.16

Does your mirror server have enough memory?

--

73,
Ged.
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Hi Ged,

My local mirror static webserver has 4GB memory.. I can download the CVD files with Debian based docker image but since it has so much variabilities, I am using alpine image.

Regards,
Ganesh


C2 General

-----Original Message-----
From: clamav-users <clamav-users-bounces@lists.clamav.net> On Behalf Of G.W. Haywood via clamav-users
Sent: 08 August 2022 12:06
To: Ganesh Kachare, Vodafone (External) via clamav-users <clamav-users@lists.clamav.net>
Cc: G.W. Haywood <clamav@jubileegroup.co.uk>
Subject: Re: [clamav-users] freshclam error - ^downloadFile: Unexpected response (502) ...Can't Download CVD

CYBER SECURITY WARNING: This email is from an external source - be careful of attachments and links. Please follow the Cyber Code and report suspicious emails.

Hi there,

On Mon, 8 Aug 2022, Ganesh Kachare, Vodafone (External) via clamav-users wrote:

> I am trying to download the clamav updates from private local mirror on my custom clamav alpine docker image and I am keep getting ^downloadFile: Unexpected response (502) error from freshclam.
>
> Its not able to download main.cvd, daily.cvd, bytecode.cvd and eventually my pod fails after maximum retry. I did tried increasing timeouts and disabling it in freshclam.conf file but it did not work.
>
> I have validated my proxy and private mirror server and they are able to connect with alpine clamav docker image.
>
> Does anyone face similar issue.. I am using clamav and freshclam v0.104.3-r0 on alpine 3.16

Does your mirror server have enough memory?

--

73,
Ged.
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.clamav.net%2Fmailman%2Flistinfo%2Fclamav-users&amp;data=05%7C01%7Cganesh.kachare%40vodafone.com%7C71208eb9252c4295ac1608da792e1110%7C68283f3b84874c86adb3a5228f18b893%7C0%7C0%7C637955536019252773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=HnF4Cj6FSsjcH5NtvHDsywbGqguEzjKGGF%2FsbZ4N26g%3D&amp;reserved=0


Help us build a comprehensive ClamAV guide:
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FCisco-Talos%2Fclamav-documentation&amp;data=05%7C01%7Cganesh.kachare%40vodafone.com%7C71208eb9252c4295ac1608da792e1110%7C68283f3b84874c86adb3a5228f18b893%7C0%7C0%7C637955536019252773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=q1iEDTLreX9vbSwVOmxuN8HHX1UjR2Qy21T0BMQ5RmM%3D&amp;reserved=0

https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.clamav.net%2F%23mailing-lists-and-chat&amp;data=05%7C01%7Cganesh.kachare%40vodafone.com%7C71208eb9252c4295ac1608da792e1110%7C68283f3b84874c86adb3a5228f18b893%7C0%7C0%7C637955536019252773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=cQ0aSpKxD0RB8kTVzMM6YdelzOzBYbS%2BoWGvrvyiDM8%3D&amp;reserved=0
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Hi there,

On Mon, 8 Aug 2022, Ganesh Kachare, Vodafone (External) via clamav-users wrote:

> My local mirror static webserver has 4GB memory.. I can download
> the CVD files with Debian based docker image but since it has so
> much variabilities, I am using alpine image.

What are the 'variabilities' which lead you to avoid the Debian-based
Docker image?

I know that there have been a few issues with Docker and ClamAV but I
have no personal experience of them. I can only suggest that if the
Debian version works OK then perhaps you should use it. Alternatively
try something like

https://github.com/Cisco-Talos/clamav/issues?q=is%3Aissue+is%3Aopen+docker

--

73,
Ged.
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

An HTTP 502 error is a "bad gateway error" or "proxy error". I suspect either the proxy settings are misconfigured, or the proxy settings in freshclam.conf are misconfigured.

Ganesh, did you say you're using a proxy and a private mirror? What sort of proxy are you using? Maybe if you could share some (anonymized) configuration options (at least the freshclam.conf options) someone can spot what is wrong.

Regards,
Micah

Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
________________________________
From: clamav-users <clamav-users-bounces@lists.clamav.net> on behalf of Ganesh Kachare, Vodafone (External) via clamav-users <clamav-users@lists.clamav.net>
Sent: Monday, August 8, 2022 3:51 AM
To: ClamAV users ML <clamav-users@lists.clamav.net>
Cc: Ganesh Kachare, Vodafone (External) <ganesh.kachare@vodafone.com>
Subject: [clamav-users] freshclam error - ^downloadFile: Unexpected response (502) ...Can't Download CVD


Hi Team,



I am trying to download the clamav updates from private local mirror on my custom clamav alpine docker image and I am keep getting ^downloadFile: Unexpected response (502) error from freshclam.



Its not able to download main.cvd, daily.cvd, bytecode.cvd and eventually my pod fails after maximum retry. I did tried increasing timeouts and disabling it in freshclam.conf file but it did not work.



I have validated my proxy and private mirror server and they are able to connect with alpine clamav docker image.



Does anyone face similar issue.. I am using clamav and freshclam v0.104.3-r0 on alpine 3.16



Logs ---



Host: localmirror.clamavdatabase.com

user-agent: ClamAV/0.104.3 (OS: Linux, ARCH: x86_64, CPU: x86_64, UUID: a37614fe-f1f8-4c49-a7a5-e0330ea8b945)

accept: */*

connection: close



* old SSL session ID is stale, removing

< HTTP/2 502

< content-type: text/html; charset=UTF-8

< referrer-policy: no-referrer

< content-length: 332

< date: Mon, 08 Aug 2022 10:16:27 GMT

< alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

<

Time: 9.0s, ETA: 0.0s [========================>] 332B/332B

* Connection #0 to host localmirror.clamavdatabase.com.com left intact

Mon Aug 8 10:16:27 2022 -> ^downloadFile: Unexpected response (502) from https://localmirror.clamavdatabase.com/daily.cvd

Mon Aug 8 10:16:27 2022 -> ^Can't download daily.cvd from https:// localmirror.clamavdatabase.com/daily.cvd<https://%20localmirror.clamavdatabase.com/daily.cvd>

Mon Aug 8 10:16:27 2022 -> Trying again in 5 secs...



Regards,

Ganesh




C2 General