Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-19 Thread Tomasz Kojm
On Sat, 17 Sep 2011 10:25:50 -0400 Dan wrote: > At 1:33 PM +0200 9/16/2011, Tomasz Kojm wrote: >> On Thu, 15 Sep 2011 12:28:50 -0400 Dan wrote: >> > At 10:43 AM +0200 9/15/2011, Tomasz Kojm wrote: >> >> OK, now please post the output of 'freshclam --list-mirrors' >> > >> > Mirror #9 >>> IP:

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-17 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >> A connection problem was considered a failure in the past but >> it was making more harm than good. In most cases the problem >> lies at the user's end (keep in mind we have ~2M different >> IPs downloading Freshclam needs a "connection failed" cou

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-17 Thread Dan
At 1:33 PM +0200 9/16/2011, Tomasz Kojm wrote: On Thu, 15 Sep 2011 12:28:50 -0400 Dan wrote: > At 10:43 AM +0200 9/15/2011, Tomasz Kojm wrote: >> OK, now please post the output of 'freshclam --list-mirrors' > > Mirror #9 IP: 88.198.67.125 Successes: 13 Failures: 0 Last access: Fri Aug 2

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-16 Thread Tomasz Kojm
On Thu, 15 Sep 2011 12:28:50 -0400 Dan wrote: > At 10:43 AM +0200 9/15/2011, Tomasz Kojm wrote: >> OK, now please post the output of 'freshclam --list-mirrors' > > Mirror #9 > IP: 88.198.67.125 > Successes: 13 > Failures: 0 > Last access: Fri Aug 26 10:45:31 2011 > Ignore: No > --

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-16 Thread Tomasz Kojm
On Thu, 15 Sep 2011 12:28:27 -0400 Dan wrote: > At 10:42 PM -0700 9/14/2011, Al Varnell wrote: >> Against all odds I've had three updates in the last 24 and two of them >> have >> been from old .125 > > Not so lucky; here every freshclam run that has touched .125 includes a > failure still. My l

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-16 Thread Tomasz Kojm
On Thu, 15 Sep 2011 12:38:40 -0700 Al Varnell wrote: [...] > Can't connect to port 80 of host db.US.clamav.net (IP: 88.198.67.125) > Can't connect to port 80 of host db.US.clamav.net (IP: 88.198.67.125) > Database updated (1038850 signatures) from db.US.clamav.net (IP: > 88.198.67.125) > Databas

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-15 Thread Al Varnell
On 9/15/11 5:19 AM, "Tomasz Kojm" wrote: > And that's the reason freshclam was choosing it as the first mirror all > the time. Freshclam tries to balance the load by preferring mirrors with > the lowest number of downloads. Then, when it fails to connect to such a > mirror, it should disable this

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-15 Thread Dan
At 10:42 PM -0700 9/14/2011, Al Varnell wrote: Against all odds I've had three updates in the last 24 and two of them have been from old .125 Not so lucky; here every freshclam run that has touched .125 includes a failure still. My latest: ClamAV update process started at Thu Sep 15 12:16:5

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-15 Thread Dan
At 10:43 AM +0200 9/15/2011, Tomasz Kojm wrote: OK, now please post the output of 'freshclam --list-mirrors' Mirror #9 IP: 88.198.67.125 Successes: 13 Failures: 0 Last access: Fri Aug 26 10:45:31 2011 Ignore: No - Mirror #10 IP: 65.19.179.67 Successes: 24 Fai

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-15 Thread Bowie Bailey
On 9/14/2011 3:29 AM, sys...@ra-schaal.de wrote: > > i´ll have at look. but i´m moving until september to a new server with > much bandwith (20 TB/month) and a better performance. > > maybe i can setup the mirror on this system on weekend. > > if you can´t connect to 88.198.67.125, you should fall

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-15 Thread Tomasz Kojm
On Thu, 15 Sep 2011 02:11:16 -0700 Al Varnell wrote: [...] > - > Mirror #11 > IP: 88.198.67.125 > Successes: 10 > Failures: 0 > Last access: Wed Sep 14 15:46:40 2011 > Ignore: No > - > Mirror #12 > IP: 207.57.106.31 > Success

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-15 Thread Al Varnell
On 9/15/11 1:43 AM, "Tomasz Kojm" wrote: > OK, now please post the output of 'freshclam --list-mirrors' > Janets-iMac-G5:~ jvarnell$ sudo /usr/local/clamXav/bin/freshclam --list-mirrors Mirror #1 IP: 194.8.197.22 Successes: 12 Failures: 0 Last access: Tue Sep 13 15:45:14 2011 Ignore: No -

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-15 Thread Tomasz Kojm
On Thu, 15 Sep 2011 01:41:29 -0700 Al Varnell wrote: > Looks to be OK. OK, now please post the output of 'freshclam --list-mirrors' -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-15 Thread Al Varnell
On 9/15/11 1:30 AM, "Tomasz Kojm" wrote: > Hey Al, > > please run 'freshclam -v' and look for this line: > > "Using IPv6 aware code" > > If it's not there, then most likely freshclam is using the older > networking code, which does not randomize IP addresses on its own but > only relies on the

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-15 Thread Tomasz Kojm
On Wed, 14 Sep 2011 22:42:53 -0700 Al Varnell wrote: > Against all odds I've had three updates in the last 24 and two of them have > been from old .125, so I reserve the right to revisit the other part of the > issue in a few days after I have some statistics on how often it gets used > on the fi

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Jim Preston
On 09/14/2011 09:20 AM, Dan wrote: At 12:36 PM -0400 9/13/2011, Bryan Burke wrote: > Noone has suggested "maximum". The issue is that the mirrors are so overloaded that it's often taking freshclam an excessive amount of time to do its thing, because of the time-outs / connection failures. N

[clamav-users] Yet Another US Mirror Issue-Solved

2011-09-14 Thread Al Varnell
It's been almost twenty-four hours since the Firewall was fixed, so I thought I'd take this opportunity to thank everybody involved, both for backing me up when there was much doubt and for offering useful suggestions and obviously to Florian for solving at his part of the issue. Hopefully US user

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread sys...@ra-schaal.de
Am 14.09.2011 18:15, schrieb Dennis Peterson: > expectation is that a reliable service is running only at the IP in the > authorative DNS server at clamav.net and that IP is 88.198.67.125. Your > depending on 46.4.61.241 as a fallback server is bad architecture. I told them a few months ago, and

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Dan
At 12:36 PM -0400 9/13/2011, Bryan Burke wrote: > Noone has suggested "maximum". The issue is that the mirrors are so overloaded that it's often taking freshclam an excessive amount of time to do its thing, because of the time-outs / connection failures. No big deal if it's the update run i

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Dennis Peterson
On 9/14/11 12:29 AM, sys...@ra-schaal.de wrote: if you can´t connect to 88.198.67.125, you should fall back to 46.4.61.241. it seems, that freshclam won´t use the second ip. nslookup clamav.akxnet.de Server: 127.0.0.1 Address:127.0.0.1#53 Name: clamav.akxnet.de Address: 88.19

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Dan
At 12:36 PM -0400 9/13/2011, Bryan Burke wrote: > Noone has suggested "maximum". The issue is that the mirrors are so overloaded that it's often taking freshclam an excessive amount of time to do its thing, because of the time-outs / connection failures. No big deal if it's the update run i

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Nathan Gibbs
On 9/13/2011 10:29 PM, Al Varnell wrote: > I was trying to say that using this command: > > freshclam --stdout --quiet --no-warnings > --log=/usr/local/clamXav/share/clamav/freshclam.log > > I can determine the IP address of a successful update in the last line, e.g. > > Database updated (10388

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Steve Basford
> On Wed, 14 Sep 2011, Dan wrote: > http://www.downforeveryoneorjustme.com/88.198.67.125 > > Says it's up. Received responses: 53 Ok 5 Fail http://host-tracker.com/check_res_ajx/8730391-0/ Cheers, Steve Sanesecurity ___ Help us build a comprehensive

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Bryan Burke
> Does your dig use the host table? Mine does not. Same with nslookup. > I can't imagine why they would, in fact. Yea, I had to use "getent hosts db.us.clamav.net" to make sure the /etc/hosts entry was working. -- Bryan Burke IT Administrator Department of Electrical Engineering and Computer Sc

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Christopher X. Candreva
On Wed, 14 Sep 2011, Dan wrote: > At 7:44 AM -0500 9/14/2011, Noel Jones wrote: > > On 9/14/2011 2:29 AM, sys...@ra-schaal.de wrote: > > > i made some changes to the firewall. if it works be now, please > > > mail me as soon as possible. > > > > I started getting successful updates from 88.198.

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Dan
At 7:44 AM -0500 9/14/2011, Noel Jones wrote: On 9/14/2011 2:29 AM, sys...@ra-schaal.de wrote: i made some changes to the firewall. if it works be now, please > mail me as soon as possible. I started getting successful updates from 88.198.67.125 a couple hours after you posted this, and port

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 9/14/2011 2:29 AM, sys...@ra-schaal.de wrote: > i made some changes to the firewall. if it works be now, please > mail me as soon as possible. I started getting successful updates from 88.198.67.125 a couple hours after you posted this, and port 8

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Al Varnell
On 9/14/11 12:29 AM, "sys...@ra-schaal.de" wrote: > i made some changes to the firewall. if it works be now, please mail me > as soon as possible. > I was able to connect via my browser. I forced an update by pulling out my bytecode.cld and it successfully downloaded it from your mirror. So wh

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread sys...@ra-schaal.de
Am 13.09.2011 20:49, schrieb Bowie Bailey: > On 9/13/2011 1:18 PM, sys...@ra-schaal.de wrote: >> Am 13.09.2011 18:01, schrieb Al Varnell: >>> On Sep 13, 2011, at 8:15 AM, Dan wrote: >>> Yet more failure on 88.198.67.125, this morning. This one is a double. >>> I was going to wait a few more

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On Sep 13, 2011, at 10:51 PM, Jim Preston wrote: > Well here I have to take exception. You have every option to choose mirrors > that suit your liking better. If the US servers are not meeting your needs, > pick a different region. If the US round-robin are using mirrors half way > around the

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Jim Preston
On 09/13/2011 02:28 PM, Bryan Burke wrote: ...with zero successful connections to that IP. The connectivity failure is entirely reproducible by hand: % telnet 88.198.67.125 80 Trying 88.198.67.125... telnet: connect to address 88.198.67.125: Connection refused telnet: Unable to connect to re

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Dennis Peterson
On 9/13/11 10:51 PM, Jim Preston wrote: Apple has chosen to go the Microsoft route of "our users are too stupid to be allowed to do their own customization" and as such we OS X users have to suffer as we do with the choices made in Redmond. I'm a Mac user for my personal workstation and I don'

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Jim Preston
On 09/13/2011 01:16 PM, Chuck Swiger wrote: This being said, there is definitely a recurring issue with this particular mirror. Since Aug 22, I've seen: % grep "Can't connect to port 80 of host database.clamav.net (IP: 88.198.67.125)" /var/log/freshclam.log | wc -l 27 ...with zero suc

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Jim Preston
On 09/13/2011 12:33 PM, Al Varnell wrote: On 9/13/11 10:18 AM, "sys...@ra-schaal.de" wrote: Am 13.09.2011 18:01, schrieb Al Varnell: On Sep 13, 2011, at 8:15 AM, Dan wrote: Yet more failure on 88.198.67.125, this morning. This one is a double. I was going to wait a few more days to menti

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On 9/13/11 8:34 PM, "Dennis Peterson" wrote: > On 9/13/11 8:31 PM, Al Varnell wrote: > >>> >> Sounds like the server will be pulled, so you may not care, but since I went >> through the effort. >> >> Made changes to the hosts file. >> >> Ran dig $ db.us.clamav.net > > Does your dig use the h

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Dennis Peterson
On 9/13/11 8:34 PM, Al Varnell wrote: On 9/13/11 8:07 PM, "Dennis Peterson" wrote: On 9/13/11 8:05 PM, Dennis Peterson wrote: I've just sent the URL to validator.wc3.org and got the same problem with this message: My fat fingers intended to type http://validator.wc.org and not what they di

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Dennis Peterson
On 9/13/11 8:31 PM, Al Varnell wrote: Sounds like the server will be pulled, so you may not care, but since I went through the effort. Made changes to the hosts file. Ran dig $ db.us.clamav.net Does your dig use the host table? Mine does not. Same with nslookup. I can't imagine why they w

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On 9/13/11 8:07 PM, "Dennis Peterson" wrote: > On 9/13/11 8:05 PM, Dennis Peterson wrote: > >> I've just sent the URL to validator.wc3.org and got the same problem with >> this >> message: > > My fat fingers intended to type http://validator.wc.org and not what they did > type. > Or possibly h

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On 9/13/11 6:58 PM, "Dennis Peterson" wrote: > On 9/13/11 3:15 PM, Bryan Burke wrote: > >> >> At least concerning this issue, is there anything more to be done? > > Eliminate some unknowns - like maybe your DNS doesn't like big packets. Add > this > *temporarily* to your host table: > > 88.1

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Dennis Peterson
On 9/13/11 8:05 PM, Dennis Peterson wrote: I've just sent the URL to validator.wc3.org and got the same problem with this message: My fat fingers intended to type http://validator.wc.org and not what they did type. dp ___ Help us build a comprehens

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Dennis Peterson
On 9/13/11 7:53 PM, Noel Jones wrote: On 9/13/2011 9:03 PM, Bryan Burke wrote: My logs show successful update sources in the last line, but not when there is no update. Ok, well I did check the output of the grep before posting the number of lines on this list, and all log entries mentioning

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Noel Jones
On 9/13/2011 9:03 PM, Bryan Burke wrote: >> My logs show successful update sources in the last line, but not when there >> is no update. > > Ok, well I did check the output of the grep before posting the number of > lines on this > list, and all log entries mentioning that IP were failures. So th

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Bryan Burke
> Eliminate some unknowns - like maybe your DNS doesn't like big > packets. Add this *temporarily* to your host table: > > 88.198.67.125 db.us.big.clamav.net > > And try again - and try with your browser, too. It should show you a > web page indentifying the site you connected to and then after

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On 9/13/11 6:31 PM, "Nathan Gibbs" wrote: > On 9/13/2011 7:07 PM, Al Varnell wrote: >> On 9/13/11 2:28 PM, "Bryan Burke" wrote: > >>> Since freshclam doesn't seem to log the IP (by default, at least) when the >>> update succeeds >>> (or there is no update), I have no good way of checking how ma

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Bryan Burke
> My logs show successful update sources in the last line, but not when there > is no update. Ok, well I did check the output of the grep before posting the number of lines on this list, and all log entries mentioning that IP were failures. So there's still *technically* some gray area, in that,

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Dennis Peterson
On 9/13/11 3:15 PM, Bryan Burke wrote: At least concerning this issue, is there anything more to be done? Eliminate some unknowns - like maybe your DNS doesn't like big packets. Add this *temporarily* to your host table: 88.198.67.125 db.us.big.clamav.net And try again - and try with yo

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Nathan Gibbs
On 9/13/2011 7:07 PM, Al Varnell wrote: > On 9/13/11 2:28 PM, "Bryan Burke" wrote: >> Since freshclam doesn't seem to log the IP (by default, at least) when the >> update succeeds >> (or there is no update), I have no good way of checking how many times >> 88.198.67.125 is queried. >> > My logs s

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On 9/13/11 2:28 PM, "Bryan Burke" wrote: >> % grep "Can't connect to port 80 of host database.clamav.net (IP: >> 88.198.67.125)" /var/log/freshclam.log | wc -l >> 27 > > Interesting. When I just grep for the IP in my logs: > > ib /var/log # grep 88.198.67.125 maillog* | wc -l > 12

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On 9/13/11 12:49 PM, "Bryan Burke" wrote: >> I don't know the frequency, but it was enough of a problem for him to >> complain...three times before I brought it up here. > > So is this issue specifically with ClamXav? i.e. is ClamXav forcing an update > each time it's run? > No, the option to c

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Bryan Burke
> No, I get an immediate connection refused and an ICMP port unreachable back: > > # tcpdump -nq host 88.198.67.125 > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > listening on en0, link-type EN10MB (Ethernet), capture size 65535 bytes > 14:32:31.222347 IP 17.209.4.7

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Nathan Gibbs
On 9/13/2011 12:47 AM, Henrik K wrote: > > If you are an individual not able to put $15-$100 a month, then yes, it's not > in your capability. > $15 - $100 extra / month would go to higher priority tasks / needs. Some of our servers are nearly old enough to vote. :-) As an individual, or small

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Chuck Swiger
On Sep 13, 2011, at 2:28 PM, Bryan Burke wrote: >> ...with zero successful connections to that IP. The connectivity failure is >> entirely reproducible by hand: >> >> % telnet 88.198.67.125 80 >> Trying 88.198.67.125... >> telnet: connect to address 88.198.67.125: Connection refused >> telnet: U

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Bryan Burke
> % grep "Can't connect to port 80 of host database.clamav.net (IP: > 88.198.67.125)" /var/log/freshclam.log | wc -l > 27 Interesting. When I just grep for the IP in my logs: ib /var/log # grep 88.198.67.125 maillog* | wc -l 12 ren /var/log # grep 88.198.67.125 maillog* | wc -

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Chuck Swiger
Hi-- On Sep 13, 2011, at 12:49 PM, Bryan Burke wrote: >> - Which always seems to be the first one checked > > Actual issue. Perhaps DNS caching is a factor? If freshclam checks often > enough, then > perhaps the cache entry never dies, and you get the same order every time? Running "dig db.us.c

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Bryan Burke
> I don't know the frequency, but it was enough of a problem for him to > complain...three times before I brought it up here. So is this issue specifically with ClamXav? i.e. is ClamXav forcing an update each time it's run? I know that the regular clamav does not do this, and if that's the produ

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On 9/13/11 10:18 AM, "sys...@ra-schaal.de" wrote: > Am 13.09.2011 18:01, schrieb Al Varnell: >> On Sep 13, 2011, at 8:15 AM, Dan wrote: >> >>> Yet more failure on 88.198.67.125, this morning. This one is a double. >> >> I was going to wait a few more days to mention this, but since you bring

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On 9/13/11 9:36 AM, "Bryan Burke" wrote: >> Noone has suggested "maximum". The issue is that the mirrors are so >> overloaded that it's often taking freshclam an excessive amount of >> time to do its thing, because of the time-outs / connection >> failures. No big deal if it's the update run in

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Bowie Bailey
On 9/13/2011 1:18 PM, sys...@ra-schaal.de wrote: > Am 13.09.2011 18:01, schrieb Al Varnell: >> On Sep 13, 2011, at 8:15 AM, Dan wrote: >> >>> Yet more failure on 88.198.67.125, this morning. This one is a double. >> I was going to wait a few more days to mention this, but since you bring it >> u

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread sys...@ra-schaal.de
Am 13.09.2011 18:01, schrieb Al Varnell: > On Sep 13, 2011, at 8:15 AM, Dan wrote: > >> Yet more failure on 88.198.67.125, this morning. This one is a double. > > I was going to wait a few more days to mention this, but since you bring it > up... > > I have seen this twice a day almost every

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Bryan Burke
> Noone has suggested "maximum". The issue is that the mirrors are so > overloaded that it's often taking freshclam an excessive amount of > time to do its thing, because of the time-outs / connection > failures. No big deal if it's the update run in the background. But > if it's on-demand update

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On Sep 13, 2011, at 8:15 AM, Dan wrote: > Yet more failure on 88.198.67.125, this morning. This one is a double. I was going to wait a few more days to mention this, but since you bring it up... I have seen this twice a day almost every day since 29 Aug. The only times I didn't see this was

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Dan
Yet more failure on 88.198.67.125, this morning. This one is a double. Shouldn't Freshclam be smart enough to avoid the same failing server at least within the same run? ClamAV update process started at Tue Sep 13 10:45:01 2011 main.cvd is up to date (version: 53, sigs: 846214, f-level: 53,

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Henrik K
On Mon, Sep 12, 2011 at 05:57:24PM -0400, Nathan Gibbs wrote: > On 9/12/2011 1:58 PM, Henrik K wrote: > > > > Guys, I'm not talking about some home or office ISP lines. I'm > > talking about rented dedicated servers that have huge bandwidth by > > contract. > > OK, but what the rest of us are tal

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Henrik K
On Mon, Sep 12, 2011 at 03:54:44PM -0400, Dan wrote: > At 8:58 PM +0300 9/12/2011, Henrik K wrote: > >Guys, I'm not talking about some home or office ISP lines. I'm > >talking about rented dedicated servers that have huge bandwidth by > >contract. Why do you make pointless arguments? > > Excuse me

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Nathan Gibbs
On 9/12/2011 1:58 PM, Henrik K wrote: > > Guys, I'm not talking about some home or office ISP lines. I'm > talking about rented dedicated servers that have huge bandwidth by > contract. OK, but what the rest of us are talking about is taking load off the global clamav mirror infrastructure. Parti

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Joel Esler
On Sep 12, 2011, at 3:20 PM, Al Varnell wrote: > On Sep 12, 2011, at 10:58 AM, Henrik K wrote: > >> I'm not talking about some home or office ISP lines. I'm talking about >> rented dedicated servers that have huge bandwidth by contract. Why do you >> make pointless arguments? > > Has anybody tal

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Jim Preston
On 09/12/2011 12:20 PM, Al Varnell wrote: On Sep 12, 2011, at 10:58 AM, Henrik K wrote: I'm not talking about some home or office ISP lines. I'm talking about rented dedicated servers that have huge bandwidth by contract. Why do you make pointless arguments? Has anybody talked to Apple? Ever

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Török Edwin
On 09/12/2011 10:54 PM, Dan wrote: > "Is there a way to make freshclam grab and verify database files from a local > directory?" Yes, but they don't work for fetching incremental updates from local dir (DatabaseCustomURL, PrivateMirror). What you could try is set DatabaseMirror to a local webse

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Dan
At 8:58 PM +0300 9/12/2011, Henrik K wrote: Guys, I'm not talking about some home or office ISP lines. I'm talking about rented dedicated servers that have huge bandwidth by contract. Why do you make pointless arguments? Excuse me? Pointless? Is that your way of disagreeing intelligently or

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Al Varnell
On Sep 12, 2011, at 10:58 AM, Henrik K wrote: > I'm not talking about some home or office ISP lines. I'm talking about > rented dedicated servers that have huge bandwidth by contract. Why do you > make pointless arguments? Has anybody talked to Apple? Every box of Server software they sell come

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Henrik K
On Mon, Sep 12, 2011 at 12:41:14PM -0400, Nathan Gibbs wrote: > On 9/12/2011 11:05 AM, Dan wrote: > > At 9:22 AM +0300 9/12/2011, Henrik K wrote: > >> On Sun, Sep 11, 2011 at 04:11:07PM -0400, Dan wrote: > >>> > >>> At 11:40 PM +0200 9/7/2011, Luca Gibelli wrote: > >>> >Traffic is around 5TB/mont

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Christopher X. Candreva
On Mon, 12 Sep 2011, Nathan Gibbs wrote: > >> Anyways, 5TB comes at 2MB/s average, which is not that much. I can do it > >> with my $15 OVH/Kimsufi box and so do probably thousands of others. > > > > Perhaps, where you live. Here, in the good'ole USofA, if I set up a > > server to feed 170 GB/da

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Nathan Gibbs
On 9/12/2011 11:05 AM, Dan wrote: > At 9:22 AM +0300 9/12/2011, Henrik K wrote: >> On Sun, Sep 11, 2011 at 04:11:07PM -0400, Dan wrote: >>> >>> At 11:40 PM +0200 9/7/2011, Luca Gibelli wrote: >>> >Traffic is around 5TB/month on each mirror. >>> >>> Short of a paid service, which I doubt any of u

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Kris Deugau
G.W. Haywood wrote: The ClamAV database mirrors appear to have a growing capacity problem. Torrents are intended to alleviate the problem, and it takes, oh, ten minutes to set one up. Scripts already exist which could be adapted fairly easily to use torrents instead of mirrors to download the da

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Dan
At 9:22 AM +0300 9/12/2011, Henrik K wrote: On Sun, Sep 11, 2011 at 04:11:07PM -0400, Dan wrote: At 11:40 PM +0200 9/7/2011, Luca Gibelli wrote: >Traffic is around 5TB/month on each mirror. Short of a paid service, which I doubt any of us want, few have such bandwidth available to donate.

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-11 Thread Henrik K
On Sun, Sep 11, 2011 at 04:11:07PM -0400, Dan wrote: > > At 11:40 PM +0200 9/7/2011, Luca Gibelli wrote: > >Traffic is around 5TB/month on each mirror. > > Short of a paid service, which I doubt any of us want, few have such > bandwidth available to donate. First of all, I think this whole threa

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-11 Thread Dennis Peterson
On 9/9/11 3:07 PM, Nathan Gibbs wrote: Not everyone on this list works in your kind of shop. Our shop has a host whose main purpose in life is to torrent Debian ISO's. All the other person is asking, is why can't we have the capability to use torrents? This solution could take load off the glo

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-11 Thread Dan
At 12:25 PM +0100 9/9/2011, G.W. Haywood wrote: > On 8-9 Sep 2011 Luca Gibelli and I wrote: > > > If anyone can provide a CVD mirror in US, please contact me directly. > > We definitely need more capacity in the db.us.clamav.net RR. > > I've asked this before and never had an answer, so I'l

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-09 Thread Nathan Gibbs
On 9/9/2011 10:57 AM, Dennis Peterson wrote: > On 9/9/11 4:25 AM, G.W. Haywood wrote: > So what's the problem? > > I guess I'd like to see what your Checkpoint firewall rules in your DC > look like and read your presentation to your security team justifying > connecting your system to unknown syst

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-09 Thread Nathan Gibbs
On 9/8/2011 11:41 AM, Luca Gibelli wrote: > > > Hello G.W., > >>> If anyone can provide a CVD mirror in US, please contact me directly. >>> We definitely need more capacity in the db.us.clamav.net RR. >> I've asked this before and never had an answer, so I'll ask again. >> Is there a reason why

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-09 Thread Jim Preston
On 09/09/2011 04:25 AM, G.W. Haywood wrote: Last I heard, the Internet had a similar reputation, but I guess you still use it. Of course in parts of the UK they call it 'tinternet' so Luca might say it's not a requirement. :) Since the widespread adoption of strong encryption and digital certi

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-09 Thread Dennis Peterson
On 9/9/11 4:25 AM, G.W. Haywood wrote: So what's the problem? I guess I'd like to see what your Checkpoint firewall rules in your DC look like and read your presentation to your security team justifying connecting your system to unknown systems using a distribution method most better known for

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-09 Thread G.W. Haywood
Hi there, > On 8-9 Sep 2011 Luca Gibelli and I wrote: > > > > If anyone can provide a CVD mirror in US, please contact me directly. > > > We definitely need more capacity in the db.us.clamav.net RR. > > > > I've asked this before and never had an answer, so I'll ask again. > > Is there a reason wh

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-08 Thread Al Varnell
On 9/8/11 11:54 AM, "Jim Preston" wrote: > The last issue is what is the default country code for ClamXav? I have > not installed or configured ClamXav for a long time. I know that the > default source build for clamav is #DatabaseMirror db.XY.clamav.net and > by incorrect default configuration

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-08 Thread Jim Preston
On 09/08/2011 03:14 AM, G.W. Haywood wrote: I've asked this before and never had an answer, so I'll ask again. Is there a reason why torrents can't be used? -- Against my head's better judgment, I am going to respond here =-O Torrents have a bad reputation from pirating software, illegal digit

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-08 Thread Jim Preston
On 09/07/2011 11:14 PM, Al Varnell wrote: Before I respond I think I should describe my role in this community. I provide uncompensated tech support on the ClamXav forum, so I attempt to keep my system configured as close to defaults as possible, since that's what most users do. On Sep 7, 20

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-08 Thread McDonald, Dan
> -Original Message- > From: clamav-users-boun...@lists.clamav.net [mailto:clamav-users- > boun...@lists.clamav.net] On Behalf Of Luca Gibelli > > Hello G.W., > > > > If anyone can provide a CVD mirror in US, please contact me > directly. > > > We definitely need more capacity in the db.u

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-08 Thread Luca Gibelli
Hello G.W., > > If anyone can provide a CVD mirror in US, please contact me directly. > > We definitely need more capacity in the db.us.clamav.net RR. > I've asked this before and never had an answer, so I'll ask again. > Is there a reason why torrents can't be used? like twitter, torrent is no

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-08 Thread G.W. Haywood
Hi there, On Thu, 8 Sep 2011 Luca Gibelli wrote: > ... > If anyone can provide a CVD mirror in US, please contact me directly. > We definitely need more capacity in the db.us.clamav.net RR. > ... I've asked this before and never had an answer, so I'll ask again. Is there a reason why torrents c

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Al Varnell
Before I respond I think I should describe my role in this community. I provide uncompensated tech support on the ClamXav forum, so I attempt to keep my system configured as close to defaults as possible, since that's what most users do. On Sep 7, 2011, at 9:49 PM, Jim Preston wrote: > I do

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Jim Preston
On 09/07/2011 12:36 PM, Al Varnell wrote: Here's my freshclam log for that period with six attempts: -- ClamAV update process started at Sun Sep 4 15:50:19 2011 main.cld is up to date (version: 53, sigs: 846214, f-level: 53, builder: sven) connect_error: getso

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Al Varnell
On Sep 7, 2011, Luca Gibelli wrote: > Hello Al, > >> error. Since that time each of two updates on 2, 3, 4, 5, & 6 Sep have >> started with that same server and erred with the following: >> > connect_error: getsockopt(SO_ERROR): fd=4 error=61: Connection refused >> > Can't connect to port 80

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Luca Gibelli
Hello Christopher, > > If anyone can provide a CVD mirror in US, please contact me directly. > > We definitely need more capacity in the db.us.clamav.net RR. > What sort of bandwidth do the mirrors use, as in what would be a typical > burst or peak load - 5mbit/sec, 10mbit/sec, etc. You can t

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Al Varnell
On 9/7/11 11:19 AM, "sys...@ra-schaal.de" wrote: > Am 07.09.2011 19:59, schrieb Al Varnell: >>> You can use 46.4.61.241 and 88.198.67.125 - both systems are always in sync. >>> >> I don't really get a choice, I must use whatever is handed off to me. I >> have never seen the 46 IP on our list. >

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Nathan Gibbs
On 9/7/2011 1:59 PM, Al Varnell wrote: > I did a port scan last evening and 80 never came available: > Port Scanning host: 88.198.67.125 > > Open TCP Port: 21 ftp > Open TCP Port: 25 smtp > Open TCP Port: 53 domain > Open TCP Por

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread sys...@ra-schaal.de
Am 07.09.2011 19:59, schrieb Al Varnell: >> You can use 46.4.61.241 and 88.198.67.125 - both systems are always in sync. >> > I don't really get a choice, I must use whatever is handed off to me. I > have never seen the 46 IP on our list. You can use clamav.akxnet.de: nslookup clamav.akxnet.de S

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Al Varnell
On 9/7/11 4:21 AM, "sys...@ra-schaal.de" wrote: > Am 07.09.2011 05:11, schrieb Al Varnell: >> According to my mirrors.dat file the last time I successfully connected to >> the US Mirror at akxnet.de (IP: 88.198.67.125) (obviously located in DE) was >> on 29 Aug, but when I check my log I see that

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Henrik K
On Wed, Sep 07, 2011 at 01:13:37PM +0200, Luca Gibelli wrote: > Hello Al, > > > error. Since that time each of two updates on 2, 3, 4, 5, & 6 Sep have > > started with that same server and erred with the following: > > > connect_error: getsockopt(SO_ERROR): fd=4 error=61: Connection refused > > >

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Christopher X. Candreva
On Wed, 7 Sep 2011, Luca Gibelli wrote: > If anyone can provide a CVD mirror in US, please contact me directly. > We definitely need more capacity in the db.us.clamav.net RR. What sort of bandwidth do the mirrors use, as in what would be a typical burst or peak load - 5mbit/sec, 10mbit/sec, etc

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Nathan Gibbs
On 9/7/2011 7:13 AM, Luca Gibelli wrote: > > If anyone can provide a CVD mirror in US, please contact me directly. > We definitely need more capacity in the db.us.clamav.net RR. > If I had the bandwidth, I would. When I have the bandwidth, I intend to. -- Sincerely, Nathan Gibbs Systems Admi

  1   2   >