" You may be up against a limitation of your BIND resolver." - First thought 
was a DNS issue but according to the FAQ's on Clam site, it should resolve 
using TXT format, which it does successfully. Unfortunately at this site I'm 
not in charge of the DNS servers. 

How would I resolve a "limitation" in my bind resolver? Would them allowing 
recursive searches help this issue? 

I get the same resolution that you received:

root@server opt# nslookup db.local.clamav.net
Server:         152.120.2.200
Address:        152.120.2.200#53

Non-authoritative answer:
db.local.clamav.net     canonical name = db.us.rr.clamav.net.
Name:   db.us.rr.clamav.net
Address: 64.22.33.90
Name:   db.us.rr.clamav.net
Address: 78.46.84.244
Name:   db.us.rr.clamav.net
Address: 155.98.64.87
Name:   db.us.rr.clamav.net
Address: 194.47.250.218
Name:   db.us.rr.clamav.net
Address: 207.57.106.31

root@server opt# dig db.local.clamav.net

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-20.P1.el5 <<>> db.local.clamav.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10991
;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;db.local.clamav.net.           IN      A

;; ANSWER SECTION:
db.local.clamav.net.    208     IN      CNAME   db.us.rr.clamav.net.
db.us.rr.clamav.net.    884     IN      A       207.57.106.31
db.us.rr.clamav.net.    884     IN      A       64.22.33.90
db.us.rr.clamav.net.    884     IN      A       78.46.84.244
db.us.rr.clamav.net.    884     IN      A       155.98.64.87
db.us.rr.clamav.net.    884     IN      A       194.47.250.218

;; Query time: 14 msec
;; SERVER: 152.120.2.200#53(152.120.2.200)
;; WHEN: Mon Jun 25 10:47:55 2012
;; MSG SIZE  rcvd: 140


Thanks!

-----Original Message-----
From: clamav-users-boun...@lists.clamav.net 
[mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Dennis Peterson
Sent: Monday, June 25, 2012 10:32 AM
To: ClamAV users ML
Subject: Re: [clamav-users] Help

On 6/25/12 7:00 AM, mario.reyes....@dot.gov wrote:
> Hey Tom,
>
> Thanks for the suggestion but it just gives me the same message over and over 
> that I find in the log.
>
> " ClamAV update process started at Mon Jun 25 09:55:43 2012
> WARNING: Can't query current.cvd.clamav.net
> WARNING: Invalid DNS reply. Falling back to HTTP mode.
> Reading CVD header (main.cvd): ERROR: Can't get information about 
> db.local.clamav.net: Temporary failure in name resolution
> WARNING: Can't read main.cvd header from db.local.clamav.net (IP: ) 
> Giving up on db.local.clamav.net...
> Update failed. Your network may be down or none of the mirrors listed in 
> /etc/freshclam.conf is working. Check 
> http://www.clamav.net/support/mirror-problem for possible reasons."
>
> The mirrors are up and I'm receiving updates on my Solaris servers from the 
> same mirror.
>
> Do you know if this problem common in LINUX or this version?
>
>
> Thanks again!
>

What do you get when you run nslookup and dig against that RR pool address 
(from the affected system)? I get:


bash-3.2$ nslookup db.local.clamav.net
Server:         192.168.2.1
Address:        192.168.2.1#53

Non-authoritative answer:
db.local.clamav.net     canonical name = db.us.rr.clamav.net.
Name:   db.us.rr.clamav.net
Address: 168.143.19.95
Name:   db.us.rr.clamav.net
Address: 194.8.197.22
Name:   db.us.rr.clamav.net
Address: 208.72.56.53
Name:   db.us.rr.clamav.net
Address: 65.19.179.67

bash-3.2$ dig db.local.clamav.net

; <<>> DiG 9.7.3-P3 <<>> db.local.clamav.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3139
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 5, ADDITIONAL: 0

;; QUESTION SECTION:
;db.local.clamav.net.           IN      A

;; ANSWER SECTION:
db.local.clamav.net.    7079    IN      CNAME   db.us.rr.clamav.net.
db.us.rr.clamav.net.    779     IN      A       65.19.179.67
db.us.rr.clamav.net.    779     IN      A       168.143.19.95
db.us.rr.clamav.net.    779     IN      A       194.8.197.22
db.us.rr.clamav.net.    779     IN      A       208.72.56.53

;; AUTHORITY SECTION:
rr.clamav.net.          7079    IN      NS      ns7.clamav.net.
rr.clamav.net.          7079    IN      NS      ns5.clamav.net.
rr.clamav.net.          7079    IN      NS      ns4.clamav.net.
rr.clamav.net.          7079    IN      NS      ns6.clamav.net.
rr.clamav.net.          7079    IN      NS      ns3.clamav.net.

;; Query time: 45 msec
;; SERVER: 192.168.2.1#53(192.168.2.1)
;; WHEN: Mon Jun 25 07:30:42 2012
;; MSG SIZE  rcvd: 214


You may be up against a limitation of your BIND resolver.

dp
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to