1 Topic by m.krzaczek

  • m.krzaczek
  • Member
  • Offline
  • Registered: 2010-08-25
  • Posts: 66

Topic: clamav can't update

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.6 OPENLDAP edition.
- Deployed with iRedMail Easy or the downloadable installer? Y
- Linux/BSD distribution name and version: CentOS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx):Apache
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Recently I have received 2 mails:

'Cron <root@mail> /usr/share/spamassassin/sa-update.cron 2>&1 | tee -a /var/log/sa-update.log
channel: no 'mirrors.sought.rules.yerp.org' record found, channel failed
15-Mar-2021 04:31:12: SpamAssassin: Unknown error code 3 from sa-update
"

and

"Cron <root@mail> /usr/share/clamav/freshclam-sleep
ERROR: getpatch: Can't download daily-26096.cdiff from database.clamav.net
ERROR: Can't download daily.cvd from database.clamav.net
"



1) I can ping database.clamav.net


2) I see the page http://database.clamav.net  in browser, then the page https://www.clamav.net/ after 15 sec
3) all my machines (linux, Windows) with calmav can't update:

Windows:
ClamAV update process started at Wed Mar 10 15:48:51 2021
main.cld is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
WARNING: getpatch: Can't download daily-25905.cdiff from database.clamav.net
WARNING: getpatch: Can't download daily-25905.cdiff from database.clamav.net
ERROR: getpatch: Can't download daily-25905.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
ERROR: Can't download daily.cvd from database.clamav.net
Giving up on database.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in c:\docume~1\admini~1\ustawi~1\temp\2\tmptxzjwy is working. Check http://www.clamav.net/support/mirror-problem for possible reasons.


4) I don't see any information in firewall utm logs, I have xg sophos utm. Moreover I did tests directly form XG, sucessfully, no problems.

How to investigate?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ms2504

  • ms2504
  • Member
  • Offline
  • Registered: 2019-06-15
  • Posts: 70

Re: clamav can't update

It's not an iRedmail issue, but it's related to spamassassin.

According to this post https://marc.info/?l=spamassassin-users … 39&w=2
i removed /etc/mail/spamassassin/channel.d/sought.conf   which is now switched off.

Updates are now running using  spamassassin-official.conf  for me.

3 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: clamav can't update

Just try again later. It's more like a temporary (clamav server side) network issue.

4 Reply by dittman (edited by dittman 2021-03-17 11:33:44)

  • dittman
  • Member
  • Offline
  • Registered: 2015-08-15
  • Posts: 55

Re: clamav can't update

I ran into this issue and after doing some research found that they've blocked the older versions of clamav.  Once I updated to clamav-0.103.0 the updates with freshclam started working again.

https://www.clamav.net/documents/end-of-life-policy-eol

5 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: clamav can't update

Code 429 means rate limited (Search "429"):
https://www.clamav.net/documents/troubleshooting-faq

6 Reply by 3aagapov

  • 3aagapov
  • Member
  • Offline
  • Registered: 2016-05-12
  • Posts: 3

Re: clamav can't update

dittman wrote:

I ran into this issue and after doing some research found that they've blocked the older versions of clamav.  Once I updated to clamav-0.103.0 the updates with freshclam started working again.

https://www.clamav.net/documents/end-of-life-policy-eol

Hi! Please tell me how you did the update. Yum update clamav command doesn't work. Dependency problems. Thank.

7 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: clamav can't update

According to this post, seems ClamAV database is running behind CloudFlare, and many mail servers may be  considered as bots:
https://www.linode.com/community/questi … swer-75910

8 Reply by dittman

  • dittman
  • Member
  • Offline
  • Registered: 2015-08-15
  • Posts: 55

Re: clamav can't update

3aagapov wrote:
dittman wrote:

I ran into this issue and after doing some research found that they've blocked the older versions of clamav.  Once I updated to clamav-0.103.0 the updates with freshclam started working again.

https://www.clamav.net/documents/end-of-life-policy-eol

Hi! Please tell me how you did the update. Yum update clamav command doesn't work. Dependency problems. Thank.

I had to remove all of the clamav packages and then install the new version.

9 Reply by 3aagapov

  • 3aagapov
  • Member
  • Offline
  • Registered: 2016-05-12
  • Posts: 3

Re: clamav can't update

dittman wrote:
3aagapov wrote:
dittman wrote:

I ran into this issue and after doing some research found that they've blocked the older versions of clamav.  Once I updated to clamav-0.103.0 the updates with freshclam started working again.

https://www.clamav.net/documents/end-of-life-policy-eol

Hi! Please tell me how you did the update. Yum update clamav command doesn't work. Dependency problems. Thank.

I had to remove all of the clamav packages and then install the new version.

Many thanks.