If your proxy ignores the TTL for the mirrors then quite likely things will grind to a halt for you. All the mirrors are in round-robin dns pools.

dp

On 3/27/18 4:32 PM, Orion Poplawski wrote:
On 03/27/2018 05:21 PM, Al Varnell wrote:
Using the same IP each time with failure will also cause mirrors.dat to 
temporarily block that IP's use for some period of time. That will require you 
to trash mirrors.dat and allow it to be rebuilt at the next check.

-Al-
I don't think mirrors.dat comes into play here as the proxy is doing the dns
lookup, not freshclam.

On Tue, Mar 27, 2018 at 03:40 PM, Orion Poplawski wrote:
On 03/27/2018 03:13 PM, Orion Poplawski wrote:
Thanks for the response.

I ended up switching freshclam to use our proxy servers and increasing the
ConnectTimeout to 60 seconds.  This has helped a bit, but I still get the
occasional issue.  Latest was trying to get daily-24426.cdiff from 72.21.91.8
around Tue Mar 27 13:31:14 2018 PDT.  These are annoying because they generate
emails.
This was exacerbated by squid continuing to use the same IP address for the
connection each time freshclam retried the download.  I'm trying enabling
http://www.squid-cache.org/Doc/config/balance_on_multiple_ip/ 
<http://www.squid-cache.org/Doc/config/balance_on_multiple_ip/> to see if that
helps.



_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml



_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to