Re: [qmailtoaster] Re: Sanesecurity Warnings
On Jun 9, 2010, at 10:48 PM, Eric Shubert e...@shubes.net wrote: Scott Hughes wrote: How/where are you seeing this message? Are you seeing anything else along with it? Is it running from the cronjob, or did you run it manually? If the later, what was the command? Details, details... Eric, I found out that this message is coming from my new server that I just built. I need to find a way to mark what messages are from which server! From the log file of the new server (which is also running the latest software): Jun 09 21:39:38 INFO - Sanesecurity mirror site used: mx0.roessner-net.de 78.46.253.227 Jun 09 21:40:08 WARNING - Connection to mx0.roessner-net.de 78.46.253.227 failed - Trying next mirror site... Jun 09 21:40:10 INFO - Sanesecurity mirror site used: spamcop03.sentechsa.net 66.18.67.75 Jun 09 21:40:40 WARNING - Connection to spamcop03.sentechsa.net 66.18.67.75 failed - Trying next mirror site... Jun 09 21:40:41 INFO - Sanesecurity mirror site used: roxxor.lncsa.com 188.165.202.60 I get the same errors when I run it manually. I have pinged several sites to ensure that I am resolving correctly. I'm stumped at this point. Thanks, Scott --- --- --- --- - Looks like a network, possibly routing, problem off hand. -- -Eric 'shubes' --- --- --- --- - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com ) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! --- --- --- --- - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com I would normally agree, but in this case everything seems to be okay. I pinged a couple of the Sanesecurity servers by name and was sucessful. Yum resolves and works without complaint. Strange indeed! Scott - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: Sanesecurity Warnings
Scott Hughes wrote: On Jun 9, 2010, at 10:48 PM, Eric Shubert e...@shubes.net wrote: Scott Hughes wrote: How/where are you seeing this message? Are you seeing anything else along with it? Is it running from the cronjob, or did you run it manually? If the later, what was the command? Details, details... Eric, I found out that this message is coming from my new server that I just built. I need to find a way to mark what messages are from which server! From the log file of the new server (which is also running the latest software): Jun 09 21:39:38 INFO - Sanesecurity mirror site used: mx0.roessner-net.de 78.46.253.227 Jun 09 21:40:08 WARNING - Connection to mx0.roessner-net.de 78.46.253.227 failed - Trying next mirror site... Jun 09 21:40:10 INFO - Sanesecurity mirror site used: spamcop03.sentechsa.net 66.18.67.75 Jun 09 21:40:40 WARNING - Connection to spamcop03.sentechsa.net 66.18.67.75 failed - Trying next mirror site... Jun 09 21:40:41 INFO - Sanesecurity mirror site used: roxxor.lncsa.com 188.165.202.60 I get the same errors when I run it manually. I have pinged several sites to ensure that I am resolving correctly. I'm stumped at this point. Thanks, Scott - Looks like a network, possibly routing, problem off hand. -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com I would normally agree, but in this case everything seems to be okay. I pinged a couple of the Sanesecurity servers by name and was sucessful. Yum resolves and works without complaint. Strange indeed! Scott - Then firewall perhaps? I don't know which port(s) the updates are done on. -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: Sanesecurity Warnings
Scott Hughes wrote: On Jun 10, 2010, at 9:31 AM, Eric Shubert e...@shubes.net wrote: Scott Hughes wrote: On Jun 9, 2010, at 10:48 PM, Eric Shubert e...@shubes.net wrote: Scott Hughes wrote: How/where are you seeing this message? Are you seeing anything else along with it? Is it running from the cronjob, or did you run it manually? If the later, what was the command? Details, details... Eric, I found out that this message is coming from my new server that I just built. I need to find a way to mark what messages are from which server! From the log file of the new server (which is also running the latest software): Jun 09 21:39:38 INFO - Sanesecurity mirror site used: mx0.roessner-net.de 78.46.253.227 Jun 09 21:40:08 WARNING - Connection to mx0.roessner-net.de 78.46.253.227 failed - Trying next mirror site... Jun 09 21:40:10 INFO - Sanesecurity mirror site used: spamcop03.sentechsa.net 66.18.67.75 Jun 09 21:40:40 WARNING - Connection to spamcop03.sentechsa.net 66.18.67.75 failed - Trying next mirror site... Jun 09 21:40:41 INFO - Sanesecurity mirror site used: roxxor.lncsa.com 188.165.202.60 I get the same errors when I run it manually. I have pinged several sites to ensure that I am resolving correctly. I'm stumped at this point. Thanks, Scott - Looks like a network, possibly routing, problem off hand. -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com I would normally agree, but in this case everything seems to be okay. I pinged a couple of the Sanesecurity servers by name and was sucessful. Yum resolves and works without complaint. Strange indeed! Scott - Then firewall perhaps? I don't know which port(s) the updates are done on. -- -Eric 'shubes' Great minds think alike! I have been checking the firewall and haven't found anything. :( Scott - You might try asking on the sanesecurity users list. On gmane.org, it's gmane.comp.security.virus.clamav.sanesecurity. -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: Sanesecurity Warnings
On Thu, Jun 10, 2010 at 12:40 PM, Eric Shubert e...@shubes.net wrote: Scott Hughes wrote: On Jun 10, 2010, at 9:31 AM, Eric Shubert e...@shubes.net wrote: Scott Hughes wrote: On Jun 9, 2010, at 10:48 PM, Eric Shubert e...@shubes.net wrote: Scott Hughes wrote: How/where are you seeing this message? Are you seeing anything else along with it? Is it running from the cronjob, or did you run it manually? If the later, what was the command? Details, details... Eric, I found out that this message is coming from my new server that I just built. I need to find a way to mark what messages are from which server! From the log file of the new server (which is also running the latest software): Jun 09 21:39:38 INFO - Sanesecurity mirror site used: mx0.roessner-net.de 78.46.253.227 Jun 09 21:40:08 WARNING - Connection to mx0.roessner-net.de78.46.253.227 failed - Trying next mirror site... Jun 09 21:40:10 INFO - Sanesecurity mirror site used: spamcop03.sentechsa.net 66.18.67.75 Jun 09 21:40:40 WARNING - Connection to spamcop03.sentechsa.net66.18.67.75 failed - Trying next mirror site... Jun 09 21:40:41 INFO - Sanesecurity mirror site used: roxxor.lncsa.com 188.165.202.60 I get the same errors when I run it manually. I have pinged several sites to ensure that I am resolving correctly. I'm stumped at this point. Thanks, Scott - Looks like a network, possibly routing, problem off hand. -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group ( www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com I would normally agree, but in this case everything seems to be okay. I pinged a couple of the Sanesecurity servers by name and was sucessful. Yum resolves and works without complaint. Strange indeed! Scott - Then firewall perhaps? I don't know which port(s) the updates are done on. -- -Eric 'shubes' Great minds think alike! I have been checking the firewall and haven't found anything. :( Scott - You might try asking on the sanesecurity users list. On gmane.org, it's gmane.comp.security.virus.clamav.sanesecurity. -- -Eric 'shubes' Well this is now solved. I just wish I know how/why. I re-ran the firewall.sh script and saved it (iptables-save) and then ran the sanesecurity update script manually. It worked. I'll watch the logs and make sure the cron job also works. Go figure... Now back to the new clamav loading issue... Scott
[qmailtoaster] Re: Sanesecurity Warnings
Scott Hughes wrote: Hello all ! I am getting the following message from Sanesecurity when it is updating: Access to all Sanesecurity mirror sites failed - Check for connectivity issues or signature database name(s) misspelled in the script's configuration file. I checked this message on Google and saw where it said that it was actually updating, but was not seeing the correct exit code so it reported the above error. From my testing I believe this to be the case. Anyone else getting this message from their cron job ? Thanks, Scott I'm not having a problem with the latest version (3.7.1). Which version are you running? Did you use qtp-install-sanesecurity to install/upgrade it? -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: Sanesecurity Warnings
On 6/9/10 8:22 PM, Eric Shubert wrote: Scott Hughes wrote: Hello all ! I am getting the following message from Sanesecurity when it is updating: Access to all Sanesecurity mirror sites failed - Check for connectivity issues or signature database name(s) misspelled in the script's configuration file. I checked this message on Google and saw where it said that it was actually updating, but was not seeing the correct exit code so it reported the above error. From my testing I believe this to be the case. Anyone else getting this message from their cron job ? Thanks, Scott I'm not having a problem with the latest version (3.7.1). Which version are you running? Did you use qtp-install-sanesecurity to install/upgrade it? Yes, I did install it with the qtp-install-sanesecurity script. I am not sure how to locate the version. Scott - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: Sanesecurity Warnings
On 6/9/10 8:22 PM, Eric Shubert wrote: Scott Hughes wrote: Hello all ! I am getting the following message from Sanesecurity when it is updating: Access to all Sanesecurity mirror sites failed - Check for connectivity issues or signature database name(s) misspelled in the script's configuration file. I checked this message on Google and saw where it said that it was actually updating, but was not seeing the correct exit code so it reported the above error. From my testing I believe this to be the case. Anyone else getting this message from their cron job ? Thanks, Scott I'm not having a problem with the latest version (3.7.1). Which version are you running? Did you use qtp-install-sanesecurity to install/upgrade it? Just did some more digging and I am using v3.7.1 of the clamav-unofficial-sigs.sh Scott - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: Sanesecurity Warnings
Scott Hughes wrote: On 6/9/10 8:22 PM, Eric Shubert wrote: Scott Hughes wrote: Hello all ! I am getting the following message from Sanesecurity when it is updating: Access to all Sanesecurity mirror sites failed - Check for connectivity issues or signature database name(s) misspelled in the script's configuration file. I checked this message on Google and saw where it said that it was actually updating, but was not seeing the correct exit code so it reported the above error. From my testing I believe this to be the case. Anyone else getting this message from their cron job ? Thanks, Scott I'm not having a problem with the latest version (3.7.1). Which version are you running? Did you use qtp-install-sanesecurity to install/upgrade it? Just did some more digging and I am using v3.7.1 of the clamav-unofficial-sigs.sh Scott - How/where are you seeing this message? Are you seeing anything else along with it? Is it running from the cronjob, or did you run it manually? If the later, what was the command? Details, details... -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: Sanesecurity Warnings
On 6/9/10 9:05 PM, Eric Shubert wrote: Scott Hughes wrote: On 6/9/10 8:22 PM, Eric Shubert wrote: Scott Hughes wrote: Hello all ! I am getting the following message from Sanesecurity when it is updating: Access to all Sanesecurity mirror sites failed - Check for connectivity issues or signature database name(s) misspelled in the script's configuration file. I checked this message on Google and saw where it said that it was actually updating, but was not seeing the correct exit code so it reported the above error. From my testing I believe this to be the case. Anyone else getting this message from their cron job ? Thanks, Scott I'm not having a problem with the latest version (3.7.1). Which version are you running? Did you use qtp-install-sanesecurity to install/upgrade it? Just did some more digging and I am using v3.7.1 of the clamav-unofficial-sigs.sh Scott - How/where are you seeing this message? Are you seeing anything else along with it? Is it running from the cronjob, or did you run it manually? If the later, what was the command? Details, details... Sorry - bit bushed tonight so not on my A game. The message is coming from a cron job. When I run it manually AND when I check the logs in the /var/log/clamav directory, I see where it says that it is downloading database files. Such as (from the log): 955 Jun 09 20:32:20 INFO - Sanesecurity GPG Signature tested good on winnow_malware.hdb database 956 Jun 09 20:32:20 INFO - Clamscan reports Sanesecurity winnow_malware.hdb database integrity tested good 957 Jun 09 20:32:20 INFO - Successfully updated Sanesecurity production database file: winnow_malware.hdb 958 Jun 09 20:32:20 INFO - Testing updated Sanesecurity database file: winnow_malware_links.ndb 959 Jun 09 20:32:20 INFO - Sanesecurity GPG Signature tested good on winnow_malware_links.ndb database 960 Jun 09 20:32:20 INFO - Clamscan reports Sanesecurity winnow_malware_links.ndb database integrity tested good 961 Jun 09 20:32:20 INFO - Successfully updated Sanesecurity production database file: winnow_malware_links.ndb 962 Jun 09 20:32:20 INFO - Checking for SecuriteInfo updates... 963 Jun 09 20:32:23 INFO - No SecuriteInfo database file updates found 964 Jun 09 20:32:23 INFO - Next MalwarePatrol download will be performed in approximately 2 hour(s), 0 minute(s) 965 Jun 09 20:32:23 INFO - Update(s) detected, reloaded ClamAV databases I am of the opinion that it IS doing what it supposed to be doing and can ignore the cron job message. Scott - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: Sanesecurity Warnings
Scott Hughes wrote: How/where are you seeing this message? Are you seeing anything else along with it? Is it running from the cronjob, or did you run it manually? If the later, what was the command? Details, details... Eric, I found out that this message is coming from my new server that I just built. I need to find a way to mark what messages are from which server! From the log file of the new server (which is also running the latest software): Jun 09 21:39:38 INFO - Sanesecurity mirror site used: mx0.roessner-net.de 78.46.253.227 Jun 09 21:40:08 WARNING - Connection to mx0.roessner-net.de 78.46.253.227 failed - Trying next mirror site... Jun 09 21:40:10 INFO - Sanesecurity mirror site used: spamcop03.sentechsa.net 66.18.67.75 Jun 09 21:40:40 WARNING - Connection to spamcop03.sentechsa.net 66.18.67.75 failed - Trying next mirror site... Jun 09 21:40:41 INFO - Sanesecurity mirror site used: roxxor.lncsa.com 188.165.202.60 I get the same errors when I run it manually. I have pinged several sites to ensure that I am resolving correctly. I'm stumped at this point. Thanks, Scott - Looks like a network, possibly routing, problem off hand. -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
