> Eliminate some unknowns - like maybe your DNS doesn't like big
> packets. Add this *temporarily* to your host table:
> 
> 88.198.67.125   db.us.big.clamav.net
> 
> And try again - and try with your browser, too. It should show you a
> web page indentifying the site you connected to and then after a
> short time you will be sent to clamav.net.

Running "host db.us.big.clamav.net" multiple times seems to reveal 15 servers 
in the pool,
and the order changes each time; as I mentioned earlier, in my case at least, 
the random
pool idea is working, even if over a 7-day period, 1/7 attempts to update 
seemed to try
the IP in question... just the nature of randomness, I suppose. Also, how would 
this
reveal anything more than what "telnet 88.198.67.125 80" getting a connection 
refused
tells us?

However, I did just discover something bizarre and interesting:

    > telnet 88.198.67.125 80
    Trying 88.198.67.125...
    telnet: connect to address 88.198.67.125: Connection refused
    > host 88.198.67.125
    125.67.198.88.in-addr.arpa domain name pointer mx00.akxnet.de.
    > host mx00.akxnet.de
    mx00.akxnet.de has address 88.198.67.99
    mx00.akxnet.de has IPv6 address 2a01:4f8:140:4301::2
    > telnet 88.198.67.99 80
    Trying 88.198.67.99...
    Connected to 88.198.67.99.
    Escape character is '^]'.
    ^]
    telnet> quit
    Connection closed.

Is it possible this is caused by a master DNS issue? Of course, I tried to see 
the page
and didn't get much, but I'm not all that familiar with HTTP:

    > curl -H "Host: db.us.clamav.net" 88.198.67.99
    <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
    <html><head>
    <title>403 Forbidden</title>
    </head><body>
    <h1>Forbidden</h1>
    <p>You don't have permission to access /
    on this server.</p>
    <hr>
    <address>Apache/2.2.15 (Linux/SUSE) Server at db.us.clamav.net Port 
80</address>
    </body></html>

-- 
Bryan Burke
IT Administrator
Department of Electrical Engineering and Computer Science
University of Tennessee, Knoxville
bbu...@eecs.utk.edu
(865) 974-4694
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to