Joel Esler jesler via clamav-users wrote:
Overall — we’re doing much better.

We’ve reduced the amount of bandwidth we’re serving by 4x, so we’ve made significant progress.

/However, /we still have over 700 individual systems downloading the full daily.cvd over 200x a day. (This should be once a day, /if that/.)

If you are not using 0.103.2 and it’s accompanying FreshClam to download these updates, and when you do create a NEW FreshClam.conf file and move your settings to that.  We’re going to have to start blocking these atrocious abusers, as the rate limits are hurting everyone else at this point.

I'm new to installing ClamAV, so there may be something I haven't done quite right here. A couple of weeks ago, I installed ClamAV 0.103.2 from the Ubuntu repositories (clamav, clamav-freshclam, clamav-daemon, clamav-docs, clamtk and libclamunrar9 packages).

By default, FreshClam seems to use too short a download timeout and retry too frequently, triggering the rate limiting. After installing, the FreshClam service would repeatedly attempt to download the daily.cvd file, time out after 30 seconds, and wait 5 seconds before trying again. After a few attempts, it then gets blocked by the CDN (if that's what "you are on cool-down" in the log means?) for 4 hours. By the time I'd realised this was happening following the initial install, I was already blocked.

Perhaps this might, if left in a default configuration, be seen to attempt to download daily.cvd over 100 times a day, but without ever actually getting the whole file. From what I'd seen here and in documentation / FAQs, I thought FreshClam was supposed to avoid retrying so frequently that it triggers the rate limiting?

I don't know if the default configuration is provided by ClamAV or the Ubuntu packaging (either way, it seems FreshClam shouldn't just keep retrying so quickly?) In my case, freshclam.conf originally had "ReceiveTimeout 30". Increasing it to 60 wasn't enough. I then went to 600, which was successful. Somewhere in between would probably have been fine, but incrementing more gradually would have been a long process, having to wait at least 4 hours between attempts (particularly as restarting FreshClam after setting a new timeout seems to get blocked for a further 4 hours - not just the remainder of the original block).

In case it's of any use (and if this list allows it), I've attached my freshclam.log from those initial attempts.

All seems to be working OK now, but posting here in case the information is useful.

Please help us, stay diligent, keep going keep upgrading.  Upgrade to 0.103.2, and keep your mirrors.dat file around, this file contains a snapshot of where you are in your update progression so that the next time that FreshClam run, it can start where it left off.

Interesting you should mention mirrors.dat... Aside from the downloads timing out, there are also some errors in my freshclam.log about not being able to create mirrors.dat. That's a bit odd, since the /var/lib/clamav/ directory is owned and writeable by the correct user, but the mirrors.dat file within it is owned by root. Deleting that file and restarting the freshclam service, the mirrors.dat file gets recreated, again owned by root. That error hasn't appeared in the logs since, although mirrors.dat is still dated 25th April, so I'm not sure if there's still a problem with that.

--
Mark.
Sun Apr 25 18:52:39 2021 -> --------------------------------------
Sun Apr 25 18:52:39 2021 -> freshclam daemon 0.103.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Sun Apr 25 18:52:39 2021 -> ClamAV update process started at Sun Apr 25 18:52:39 2021
Sun Apr 25 18:52:39 2021 -> daily database available for download (remote version: 26151)
Sun Apr 25 18:53:09 2021 -> WARNING: Download failed (28) Sun Apr 25 18:53:09 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 18:53:09 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Sun Apr 25 18:53:09 2021 -> Trying again in 5 secs...
Sun Apr 25 18:53:14 2021 -> daily database available for download (remote version: 26151)
Sun Apr 25 18:53:44 2021 -> WARNING: Download failed (28) Sun Apr 25 18:53:44 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 18:53:44 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Sun Apr 25 18:53:44 2021 -> Trying again in 5 secs...
Sun Apr 25 18:53:49 2021 -> daily database available for download (remote version: 26151)
Sun Apr 25 18:54:19 2021 -> WARNING: Download failed (28) Sun Apr 25 18:54:19 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 18:54:19 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Sun Apr 25 18:54:19 2021 -> Trying again in 5 secs...
Sun Apr 25 18:54:24 2021 -> daily database available for download (remote version: 26151)
Sun Apr 25 18:54:54 2021 -> WARNING: Download failed (28) Sun Apr 25 18:54:54 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 18:54:54 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Sun Apr 25 18:54:54 2021 -> Trying again in 5 secs...
Sun Apr 25 18:54:59 2021 -> daily database available for download (remote version: 26151)
Sun Apr 25 18:55:29 2021 -> ERROR: Download failed (28) Sun Apr 25 18:55:29 2021 -> ERROR:  Message: Timeout was reached
Sun Apr 25 18:55:29 2021 -> ERROR: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Sun Apr 25 18:55:29 2021 -> Giving up on https://database.clamav.net...
Sun Apr 25 18:55:29 2021 -> daily database available for download (remote version: 26151)
Sun Apr 25 18:55:59 2021 -> WARNING: Download failed (28) Sun Apr 25 18:55:59 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 18:55:59 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Sun Apr 25 18:55:59 2021 -> Trying again in 5 secs...
Sun Apr 25 18:56:04 2021 -> daily database available for download (remote version: 26151)
Sun Apr 25 18:56:34 2021 -> WARNING: Download failed (28) Sun Apr 25 18:56:34 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 18:56:34 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Sun Apr 25 18:56:34 2021 -> Trying again in 5 secs...
Sun Apr 25 18:56:39 2021 -> daily database available for download (remote version: 26151)
Sun Apr 25 18:56:40 2021 -> ERROR: Can't create mirrors.dat in /var/lib/clamav
Sun Apr 25 18:56:40 2021 -> Hint: The database directory must be writable for UID 125 or GID 134
Sun Apr 25 18:56:40 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Sun Apr 25 18:56:40 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
Sun Apr 25 18:56:40 2021 -> This means that you have been rate limited by the CDN.
Sun Apr 25 18:56:40 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Sun Apr 25 18:56:40 2021 ->     FreshClam should check DNS first to see if an update is needed.
Sun Apr 25 18:56:40 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Sun Apr 25 18:56:40 2021 ->     it is recommended that you set up a private mirror on your network using
Sun Apr 25 18:56:40 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Sun Apr 25 18:56:40 2021 ->     CDN and your own network.
Sun Apr 25 18:56:40 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Sun Apr 25 18:56:40 2021 ->     it will not be granted.
Sun Apr 25 18:56:40 2021 -> WARNING: You are on cool-down until after: 2021-04-25 22:56:40
Sun Apr 25 18:56:40 2021 -> main database available for download (remote version: 59)
Sun Apr 25 18:57:10 2021 -> WARNING: Download failed (28) Sun Apr 25 18:57:10 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 18:57:10 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Sun Apr 25 18:57:10 2021 -> Trying again in 5 secs...
Sun Apr 25 18:57:15 2021 -> main database available for download (remote version: 59)
Sun Apr 25 18:57:45 2021 -> WARNING: Download failed (28) Sun Apr 25 18:57:45 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 18:57:45 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Sun Apr 25 18:57:45 2021 -> Trying again in 5 secs...
Sun Apr 25 18:57:50 2021 -> main database available for download (remote version: 59)
Sun Apr 25 18:58:20 2021 -> WARNING: Download failed (28) Sun Apr 25 18:58:20 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 18:58:20 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Sun Apr 25 18:58:20 2021 -> Trying again in 5 secs...
Sun Apr 25 18:58:25 2021 -> main database available for download (remote version: 59)
Sun Apr 25 18:58:55 2021 -> WARNING: Download failed (28) Sun Apr 25 18:58:55 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 18:58:55 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Sun Apr 25 18:58:55 2021 -> Trying again in 5 secs...
Sun Apr 25 18:59:00 2021 -> main database available for download (remote version: 59)
Sun Apr 25 18:59:30 2021 -> ERROR: Download failed (28) Sun Apr 25 18:59:30 2021 -> ERROR:  Message: Timeout was reached
Sun Apr 25 18:59:30 2021 -> ERROR: Can't download main.cvd from https://database.clamav.net/main.cvd
Sun Apr 25 18:59:30 2021 -> Giving up on https://database.clamav.net...
Sun Apr 25 18:59:30 2021 -> main database available for download (remote version: 59)
Sun Apr 25 19:00:00 2021 -> WARNING: Download failed (28) Sun Apr 25 19:00:00 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 19:00:00 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Sun Apr 25 19:00:00 2021 -> Trying again in 5 secs...
Sun Apr 25 19:00:05 2021 -> main database available for download (remote version: 59)
Sun Apr 25 19:00:35 2021 -> WARNING: Download failed (28) Sun Apr 25 19:00:35 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 19:00:35 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Sun Apr 25 19:00:35 2021 -> Trying again in 5 secs...
Sun Apr 25 19:00:40 2021 -> main database available for download (remote version: 59)
Sun Apr 25 19:01:10 2021 -> WARNING: Download failed (28) Sun Apr 25 19:01:10 2021 -> WARNING:  Message: Timeout was reached
Sun Apr 25 19:01:10 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Sun Apr 25 19:01:10 2021 -> Trying again in 5 secs...
Sun Apr 25 19:01:15 2021 -> main database available for download (remote version: 59)
Sun Apr 25 19:01:15 2021 -> ERROR: Can't create mirrors.dat in /var/lib/clamav
Sun Apr 25 19:01:15 2021 -> Hint: The database directory must be writable for UID 125 or GID 134
Sun Apr 25 19:01:15 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Sun Apr 25 19:01:15 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
Sun Apr 25 19:01:15 2021 -> This means that you have been rate limited by the CDN.
Sun Apr 25 19:01:15 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Sun Apr 25 19:01:15 2021 ->     FreshClam should check DNS first to see if an update is needed.
Sun Apr 25 19:01:15 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Sun Apr 25 19:01:15 2021 ->     it is recommended that you set up a private mirror on your network using
Sun Apr 25 19:01:15 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Sun Apr 25 19:01:15 2021 ->     CDN and your own network.
Sun Apr 25 19:01:15 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Sun Apr 25 19:01:15 2021 ->     it will not be granted.
Sun Apr 25 19:01:15 2021 -> WARNING: You are on cool-down until after: 2021-04-25 23:01:15
Sun Apr 25 19:01:15 2021 -> bytecode database available for download (remote version: 333)
Sun Apr 25 19:01:15 2021 -> Testing database: '/var/lib/clamav/tmp.bcd49c6f51/clamav-12245ec4782cfcfeb68345003defb5b7.tmp-bytecode.cvd' ...
Sun Apr 25 19:01:16 2021 -> Database test passed.
Sun Apr 25 19:01:16 2021 -> bytecode.cvd updated (version: 333, sigs: 92, f-level: 63, builder: awillia2)
Sun Apr 25 19:01:16 2021 -> WARNING: Clamd was NOT notified: Can't connect to clamd through /var/run/clamav/clamd.ctl: No such file or directory
Sun Apr 25 19:01:16 2021 -> --------------------------------------
Sun Apr 25 19:10:39 2021 -> Update process terminated
Sun Apr 25 19:10:39 2021 -> --------------------------------------
Sun Apr 25 19:10:39 2021 -> freshclam daemon 0.103.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Sun Apr 25 19:10:39 2021 -> ClamAV update process started at Sun Apr 25 19:10:39 2021
Sun Apr 25 19:10:39 2021 -> daily database available for download (remote version: 26151)
Sun Apr 25 19:10:39 2021 -> ERROR: Can't create mirrors.dat in /var/lib/clamav
Sun Apr 25 19:10:39 2021 -> Hint: The database directory must be writable for UID 125 or GID 134
Sun Apr 25 19:10:39 2021 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Sun Apr 25 19:10:39 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
Sun Apr 25 19:10:39 2021 -> This means that you have been rate limited by the CDN.
Sun Apr 25 19:10:39 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Sun Apr 25 19:10:39 2021 ->     FreshClam should check DNS first to see if an update is needed.
Sun Apr 25 19:10:39 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Sun Apr 25 19:10:39 2021 ->     it is recommended that you set up a private mirror on your network using
Sun Apr 25 19:10:39 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Sun Apr 25 19:10:39 2021 ->     CDN and your own network.
Sun Apr 25 19:10:39 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Sun Apr 25 19:10:39 2021 ->     it will not be granted.
Sun Apr 25 19:10:39 2021 -> WARNING: You are on cool-down until after: 2021-04-25 23:10:39
Sun Apr 25 19:10:39 2021 -> main database available for download (remote version: 59)
Sun Apr 25 19:10:39 2021 -> ERROR: Can't create mirrors.dat in /var/lib/clamav
Sun Apr 25 19:10:39 2021 -> Hint: The database directory must be writable for UID 125 or GID 134
Sun Apr 25 19:10:39 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Sun Apr 25 19:10:39 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
Sun Apr 25 19:10:39 2021 -> This means that you have been rate limited by the CDN.
Sun Apr 25 19:10:39 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Sun Apr 25 19:10:39 2021 ->     FreshClam should check DNS first to see if an update is needed.
Sun Apr 25 19:10:39 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Sun Apr 25 19:10:39 2021 ->     it is recommended that you set up a private mirror on your network using
Sun Apr 25 19:10:39 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Sun Apr 25 19:10:39 2021 ->     CDN and your own network.
Sun Apr 25 19:10:39 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Sun Apr 25 19:10:39 2021 ->     it will not be granted.
Sun Apr 25 19:10:39 2021 -> WARNING: You are on cool-down until after: 2021-04-25 23:10:39
Sun Apr 25 19:10:39 2021 -> bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
Sun Apr 25 19:10:39 2021 -> --------------------------------------
Sun Apr 25 20:10:39 2021 -> Received signal: wake up
Sun Apr 25 20:10:39 2021 -> ClamAV update process started at Sun Apr 25 20:10:39 2021
Sun Apr 25 20:10:39 2021 -> WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
Sun Apr 25 20:10:39 2021 -> This means that you have been rate limited by the CDN.
Sun Apr 25 20:10:39 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Sun Apr 25 20:10:39 2021 ->     FreshClam should check DNS first to see if an update is needed.
Sun Apr 25 20:10:39 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Sun Apr 25 20:10:39 2021 ->     it is recommended that you set up a private mirror on your network using
Sun Apr 25 20:10:39 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Sun Apr 25 20:10:39 2021 ->     CDN and your own network.
Sun Apr 25 20:10:39 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Sun Apr 25 20:10:39 2021 ->     it will not be granted.
Sun Apr 25 20:10:39 2021 -> WARNING: You are still on cool-down until after: 2021-04-25 23:10:39
Sun Apr 25 20:10:39 2021 -> --------------------------------------
Sun Apr 25 21:10:39 2021 -> Received signal: wake up
Sun Apr 25 21:10:39 2021 -> ClamAV update process started at Sun Apr 25 21:10:39 2021
Sun Apr 25 21:10:39 2021 -> WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
Sun Apr 25 21:10:39 2021 -> This means that you have been rate limited by the CDN.
Sun Apr 25 21:10:39 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Sun Apr 25 21:10:39 2021 ->     FreshClam should check DNS first to see if an update is needed.
Sun Apr 25 21:10:39 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Sun Apr 25 21:10:39 2021 ->     it is recommended that you set up a private mirror on your network using
Sun Apr 25 21:10:39 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Sun Apr 25 21:10:39 2021 ->     CDN and your own network.
Sun Apr 25 21:10:39 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Sun Apr 25 21:10:39 2021 ->     it will not be granted.
Sun Apr 25 21:10:39 2021 -> WARNING: You are still on cool-down until after: 2021-04-25 23:10:39
Sun Apr 25 21:10:39 2021 -> --------------------------------------
Sun Apr 25 22:10:39 2021 -> Received signal: wake up
Sun Apr 25 22:10:39 2021 -> ClamAV update process started at Sun Apr 25 22:10:39 2021
Sun Apr 25 22:10:39 2021 -> WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
Sun Apr 25 22:10:39 2021 -> This means that you have been rate limited by the CDN.
Sun Apr 25 22:10:39 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Sun Apr 25 22:10:39 2021 ->     FreshClam should check DNS first to see if an update is needed.
Sun Apr 25 22:10:39 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Sun Apr 25 22:10:39 2021 ->     it is recommended that you set up a private mirror on your network using
Sun Apr 25 22:10:39 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Sun Apr 25 22:10:39 2021 ->     CDN and your own network.
Sun Apr 25 22:10:39 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Sun Apr 25 22:10:39 2021 ->     it will not be granted.
Sun Apr 25 22:10:39 2021 -> WARNING: You are still on cool-down until after: 2021-04-25 23:10:39
Sun Apr 25 22:10:39 2021 -> --------------------------------------
Sun Apr 25 22:49:38 2021 -> Update process terminated
Mon Apr 26 19:57:31 2021 -> --------------------------------------
Mon Apr 26 19:57:31 2021 -> freshclam daemon 0.103.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Mon Apr 26 19:57:31 2021 -> ClamAV update process started at Mon Apr 26 19:57:31 2021
Mon Apr 26 19:57:32 2021 -> daily database available for download (remote version: 26152)
Mon Apr 26 19:58:31 2021 -> Testing database: '/var/lib/clamav/tmp.ab14b3e867/clamav-bbf2bf7811db869193e32f77e4d5bf81.tmp-daily.cvd' ...
Mon Apr 26 19:58:38 2021 -> Database test passed.
Mon Apr 26 19:58:38 2021 -> daily.cvd updated (version: 26152, sigs: 3973675, f-level: 63, builder: raynman)
Mon Apr 26 19:58:38 2021 -> main database available for download (remote version: 59)
Mon Apr 26 19:59:38 2021 -> WARNING: Download failed (28) Mon Apr 26 19:59:38 2021 -> WARNING:  Message: Timeout was reached
Mon Apr 26 19:59:38 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Mon Apr 26 19:59:38 2021 -> Trying again in 5 secs...
Mon Apr 26 19:59:43 2021 -> main database available for download (remote version: 59)
Mon Apr 26 20:00:43 2021 -> WARNING: Download failed (28) Mon Apr 26 20:00:43 2021 -> WARNING:  Message: Timeout was reached
Mon Apr 26 20:00:43 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Mon Apr 26 20:00:43 2021 -> Trying again in 5 secs...
Mon Apr 26 20:00:48 2021 -> main database available for download (remote version: 59)
Mon Apr 26 20:01:48 2021 -> WARNING: Download failed (28) Mon Apr 26 20:01:48 2021 -> WARNING:  Message: Timeout was reached
Mon Apr 26 20:01:48 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Mon Apr 26 20:01:48 2021 -> Trying again in 5 secs...
Mon Apr 26 20:01:53 2021 -> main database available for download (remote version: 59)
Mon Apr 26 20:02:53 2021 -> WARNING: Download failed (28) Mon Apr 26 20:02:53 2021 -> WARNING:  Message: Timeout was reached
Mon Apr 26 20:02:53 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Mon Apr 26 20:02:53 2021 -> Trying again in 5 secs...
Mon Apr 26 20:02:58 2021 -> main database available for download (remote version: 59)
Mon Apr 26 20:03:58 2021 -> ERROR: Download failed (28) Mon Apr 26 20:03:58 2021 -> ERROR:  Message: Timeout was reached
Mon Apr 26 20:03:58 2021 -> ERROR: Can't download main.cvd from https://database.clamav.net/main.cvd
Mon Apr 26 20:03:58 2021 -> Giving up on https://database.clamav.net...
Mon Apr 26 20:03:58 2021 -> main database available for download (remote version: 59)
Mon Apr 26 20:04:58 2021 -> WARNING: Download failed (28) Mon Apr 26 20:04:58 2021 -> WARNING:  Message: Timeout was reached
Mon Apr 26 20:04:58 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Mon Apr 26 20:04:58 2021 -> Trying again in 5 secs...
Mon Apr 26 20:05:03 2021 -> main database available for download (remote version: 59)
Mon Apr 26 20:06:03 2021 -> WARNING: Download failed (28) Mon Apr 26 20:06:03 2021 -> WARNING:  Message: Timeout was reached
Mon Apr 26 20:06:03 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Mon Apr 26 20:06:03 2021 -> Trying again in 5 secs...
Mon Apr 26 20:06:08 2021 -> main database available for download (remote version: 59)
Mon Apr 26 20:07:08 2021 -> WARNING: Download failed (28) Mon Apr 26 20:07:08 2021 -> WARNING:  Message: Timeout was reached
Mon Apr 26 20:07:08 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Mon Apr 26 20:07:08 2021 -> Trying again in 5 secs...
Mon Apr 26 20:07:13 2021 -> main database available for download (remote version: 59)
Mon Apr 26 20:08:13 2021 -> WARNING: Download failed (28) Mon Apr 26 20:08:13 2021 -> WARNING:  Message: Timeout was reached
Mon Apr 26 20:08:13 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Mon Apr 26 20:08:13 2021 -> Trying again in 5 secs...
Mon Apr 26 20:08:18 2021 -> main database available for download (remote version: 59)
Mon Apr 26 20:08:18 2021 -> ERROR: Can't create mirrors.dat in /var/lib/clamav
Mon Apr 26 20:08:18 2021 -> Hint: The database directory must be writable for UID 125 or GID 134
Mon Apr 26 20:08:18 2021 -> ERROR: Can't download main.cvd from https://database.clamav.net/main.cvd
Mon Apr 26 20:08:18 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
Mon Apr 26 20:08:18 2021 -> This means that you have been rate limited by the CDN.
Mon Apr 26 20:08:18 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Mon Apr 26 20:08:18 2021 ->     FreshClam should check DNS first to see if an update is needed.
Mon Apr 26 20:08:18 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Mon Apr 26 20:08:18 2021 ->     it is recommended that you set up a private mirror on your network using
Mon Apr 26 20:08:18 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Mon Apr 26 20:08:18 2021 ->     CDN and your own network.
Mon Apr 26 20:08:18 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Mon Apr 26 20:08:18 2021 ->     it will not be granted.
Mon Apr 26 20:08:18 2021 -> WARNING: You are on cool-down until after: 2021-04-27 00:08:18
Mon Apr 26 20:08:18 2021 -> bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
Mon Apr 26 20:08:18 2021 -> WARNING: Clamd was NOT notified: Can't connect to clamd through /var/run/clamav/clamd.ctl: No such file or directory
Mon Apr 26 20:08:18 2021 -> --------------------------------------
Mon Apr 26 21:08:18 2021 -> Received signal: wake up
Mon Apr 26 21:08:18 2021 -> ClamAV update process started at Mon Apr 26 21:08:18 2021
Mon Apr 26 21:08:19 2021 -> WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
Mon Apr 26 21:08:19 2021 -> This means that you have been rate limited by the CDN.
Mon Apr 26 21:08:19 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Mon Apr 26 21:08:19 2021 ->     FreshClam should check DNS first to see if an update is needed.
Mon Apr 26 21:08:19 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Mon Apr 26 21:08:19 2021 ->     it is recommended that you set up a private mirror on your network using
Mon Apr 26 21:08:19 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Mon Apr 26 21:08:19 2021 ->     CDN and your own network.
Mon Apr 26 21:08:19 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Mon Apr 26 21:08:19 2021 ->     it will not be granted.
Mon Apr 26 21:08:19 2021 -> WARNING: You are still on cool-down until after: 2021-04-27 00:08:18
Mon Apr 26 21:08:19 2021 -> --------------------------------------
Mon Apr 26 22:08:19 2021 -> Received signal: wake up
Mon Apr 26 22:08:19 2021 -> ClamAV update process started at Mon Apr 26 22:08:19 2021
Mon Apr 26 22:08:19 2021 -> WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
Mon Apr 26 22:08:19 2021 -> This means that you have been rate limited by the CDN.
Mon Apr 26 22:08:19 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Mon Apr 26 22:08:19 2021 ->     FreshClam should check DNS first to see if an update is needed.
Mon Apr 26 22:08:19 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Mon Apr 26 22:08:19 2021 ->     it is recommended that you set up a private mirror on your network using
Mon Apr 26 22:08:19 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Mon Apr 26 22:08:19 2021 ->     CDN and your own network.
Mon Apr 26 22:08:19 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Mon Apr 26 22:08:19 2021 ->     it will not be granted.
Mon Apr 26 22:08:19 2021 -> WARNING: You are still on cool-down until after: 2021-04-27 00:08:18
Mon Apr 26 22:08:19 2021 -> --------------------------------------
Mon Apr 26 23:08:19 2021 -> Received signal: wake up
Mon Apr 26 23:08:19 2021 -> ClamAV update process started at Mon Apr 26 23:08:19 2021
Mon Apr 26 23:08:19 2021 -> WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
Mon Apr 26 23:08:19 2021 -> This means that you have been rate limited by the CDN.
Mon Apr 26 23:08:19 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Mon Apr 26 23:08:19 2021 ->     FreshClam should check DNS first to see if an update is needed.
Mon Apr 26 23:08:19 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Mon Apr 26 23:08:19 2021 ->     it is recommended that you set up a private mirror on your network using
Mon Apr 26 23:08:19 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Mon Apr 26 23:08:19 2021 ->     CDN and your own network.
Mon Apr 26 23:08:19 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Mon Apr 26 23:08:19 2021 ->     it will not be granted.
Mon Apr 26 23:08:19 2021 -> WARNING: You are still on cool-down until after: 2021-04-27 00:08:18
Mon Apr 26 23:08:19 2021 -> --------------------------------------
Mon Apr 26 23:18:21 2021 -> Update process terminated
Tue Apr 27 20:00:12 2021 -> --------------------------------------
Tue Apr 27 20:00:12 2021 -> freshclam daemon 0.103.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Tue Apr 27 20:00:12 2021 -> ClamAV update process started at Tue Apr 27 20:00:12 2021
Tue Apr 27 20:00:12 2021 -> daily database available for update (local version: 26152, remote version: 26153)
Tue Apr 27 20:00:15 2021 -> Testing database: '/var/lib/clamav/tmp.83774df3d8/clamav-23e68f4cc68ead705b81893484a5ef40.tmp-daily.cld' ...
Tue Apr 27 20:00:21 2021 -> Database test passed.
Tue Apr 27 20:00:21 2021 -> daily.cld updated (version: 26153, sigs: 3974422, f-level: 63, builder: raynman)
Tue Apr 27 20:00:21 2021 -> main database available for download (remote version: 59)
Tue Apr 27 20:01:21 2021 -> WARNING: Download failed (28) Tue Apr 27 20:01:21 2021 -> WARNING:  Message: Timeout was reached
Tue Apr 27 20:01:21 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Tue Apr 27 20:01:21 2021 -> Trying again in 5 secs...
Tue Apr 27 20:01:26 2021 -> main database available for download (remote version: 59)
Tue Apr 27 20:02:26 2021 -> WARNING: Download failed (28) Tue Apr 27 20:02:26 2021 -> WARNING:  Message: Timeout was reached
Tue Apr 27 20:02:26 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Tue Apr 27 20:02:26 2021 -> Trying again in 5 secs...
Tue Apr 27 20:02:31 2021 -> main database available for download (remote version: 59)
Tue Apr 27 20:03:31 2021 -> WARNING: Download failed (28) Tue Apr 27 20:03:31 2021 -> WARNING:  Message: Timeout was reached
Tue Apr 27 20:03:31 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Tue Apr 27 20:03:31 2021 -> Trying again in 5 secs...
Tue Apr 27 20:03:36 2021 -> main database available for download (remote version: 59)
Tue Apr 27 20:04:36 2021 -> WARNING: Download failed (28) Tue Apr 27 20:04:36 2021 -> WARNING:  Message: Timeout was reached
Tue Apr 27 20:04:36 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Tue Apr 27 20:04:36 2021 -> Trying again in 5 secs...
Tue Apr 27 20:04:41 2021 -> main database available for download (remote version: 59)
Tue Apr 27 20:05:41 2021 -> ERROR: Download failed (28) Tue Apr 27 20:05:41 2021 -> ERROR:  Message: Timeout was reached
Tue Apr 27 20:05:41 2021 -> ERROR: Can't download main.cvd from https://database.clamav.net/main.cvd
Tue Apr 27 20:05:41 2021 -> Giving up on https://database.clamav.net...
Tue Apr 27 20:05:41 2021 -> main database available for download (remote version: 59)
Tue Apr 27 20:06:41 2021 -> WARNING: Download failed (28) Tue Apr 27 20:06:41 2021 -> WARNING:  Message: Timeout was reached
Tue Apr 27 20:06:41 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Tue Apr 27 20:06:41 2021 -> Trying again in 5 secs...
Tue Apr 27 20:06:46 2021 -> main database available for download (remote version: 59)
Tue Apr 27 20:07:46 2021 -> WARNING: Download failed (28) Tue Apr 27 20:07:46 2021 -> WARNING:  Message: Timeout was reached
Tue Apr 27 20:07:46 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Tue Apr 27 20:07:46 2021 -> Trying again in 5 secs...
Tue Apr 27 20:07:51 2021 -> main database available for download (remote version: 59)
Tue Apr 27 20:07:52 2021 -> ERROR: Can't create mirrors.dat in /var/lib/clamav
Tue Apr 27 20:07:52 2021 -> Hint: The database directory must be writable for UID 125 or GID 134
Tue Apr 27 20:07:52 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Tue Apr 27 20:07:52 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
Tue Apr 27 20:07:52 2021 -> This means that you have been rate limited by the CDN.
Tue Apr 27 20:07:52 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Tue Apr 27 20:07:52 2021 ->     FreshClam should check DNS first to see if an update is needed.
Tue Apr 27 20:07:52 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Tue Apr 27 20:07:52 2021 ->     it is recommended that you set up a private mirror on your network using
Tue Apr 27 20:07:52 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Tue Apr 27 20:07:52 2021 ->     CDN and your own network.
Tue Apr 27 20:07:52 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Tue Apr 27 20:07:52 2021 ->     it will not be granted.
Tue Apr 27 20:07:52 2021 -> WARNING: You are on cool-down until after: 2021-04-28 00:07:52
Tue Apr 27 20:07:52 2021 -> bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
Tue Apr 27 20:07:52 2021 -> WARNING: Clamd was NOT notified: Can't connect to clamd through /var/run/clamav/clamd.ctl: No such file or directory
Tue Apr 27 20:07:52 2021 -> --------------------------------------
Tue Apr 27 20:45:58 2021 -> Update process terminated
Tue Apr 27 20:45:58 2021 -> --------------------------------------
Tue Apr 27 20:45:58 2021 -> freshclam daemon 0.103.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Tue Apr 27 20:45:58 2021 -> ClamAV update process started at Tue Apr 27 20:45:58 2021
Tue Apr 27 20:45:58 2021 -> daily.cld database is up-to-date (version: 26153, sigs: 3974422, f-level: 63, builder: raynman)
Tue Apr 27 20:45:58 2021 -> main database available for download (remote version: 59)
Tue Apr 27 20:45:58 2021 -> ERROR: Can't create mirrors.dat in /var/lib/clamav
Tue Apr 27 20:45:58 2021 -> Hint: The database directory must be writable for UID 125 or GID 134
Tue Apr 27 20:45:58 2021 -> WARNING: Can't download main.cvd from https://database.clamav.net/main.cvd
Tue Apr 27 20:45:58 2021 -> WARNING: FreshClam received error code 429 from the ClamAV Content Delivery Network (CDN).
Tue Apr 27 20:45:58 2021 -> This means that you have been rate limited by the CDN.
Tue Apr 27 20:45:58 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Tue Apr 27 20:45:58 2021 ->     FreshClam should check DNS first to see if an update is needed.
Tue Apr 27 20:45:58 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Tue Apr 27 20:45:58 2021 ->     it is recommended that you set up a private mirror on your network using
Tue Apr 27 20:45:58 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Tue Apr 27 20:45:58 2021 ->     CDN and your own network.
Tue Apr 27 20:45:58 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Tue Apr 27 20:45:58 2021 ->     it will not be granted.
Tue Apr 27 20:45:58 2021 -> WARNING: You are on cool-down until after: 2021-04-28 00:45:58
Tue Apr 27 20:45:58 2021 -> bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
Tue Apr 27 20:45:58 2021 -> --------------------------------------
Tue Apr 27 21:45:58 2021 -> Received signal: wake up
Tue Apr 27 21:45:58 2021 -> ClamAV update process started at Tue Apr 27 21:45:58 2021
Tue Apr 27 21:45:58 2021 -> WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
Tue Apr 27 21:45:58 2021 -> This means that you have been rate limited by the CDN.
Tue Apr 27 21:45:58 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Tue Apr 27 21:45:58 2021 ->     FreshClam should check DNS first to see if an update is needed.
Tue Apr 27 21:45:58 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Tue Apr 27 21:45:58 2021 ->     it is recommended that you set up a private mirror on your network using
Tue Apr 27 21:45:58 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Tue Apr 27 21:45:58 2021 ->     CDN and your own network.
Tue Apr 27 21:45:58 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Tue Apr 27 21:45:58 2021 ->     it will not be granted.
Tue Apr 27 21:45:58 2021 -> WARNING: You are still on cool-down until after: 2021-04-28 00:45:58
Tue Apr 27 21:45:58 2021 -> --------------------------------------
Tue Apr 27 22:45:58 2021 -> Received signal: wake up
Tue Apr 27 22:45:58 2021 -> ClamAV update process started at Tue Apr 27 22:45:58 2021
Tue Apr 27 22:45:58 2021 -> WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
Tue Apr 27 22:45:58 2021 -> This means that you have been rate limited by the CDN.
Tue Apr 27 22:45:58 2021 ->  1. Run FreshClam no more than once an hour to check for updates.
Tue Apr 27 22:45:58 2021 ->     FreshClam should check DNS first to see if an update is needed.
Tue Apr 27 22:45:58 2021 ->  2. If you have more than 10 hosts on your network attempting to download,
Tue Apr 27 22:45:58 2021 ->     it is recommended that you set up a private mirror on your network using
Tue Apr 27 22:45:58 2021 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Tue Apr 27 22:45:58 2021 ->     CDN and your own network.
Tue Apr 27 22:45:58 2021 ->  3. Please do not open a ticket asking for an exemption from the rate limit,
Tue Apr 27 22:45:58 2021 ->     it will not be granted.
Tue Apr 27 22:45:58 2021 -> WARNING: You are still on cool-down until after: 2021-04-28 00:45:58
Tue Apr 27 22:45:58 2021 -> --------------------------------------
Tue Apr 27 23:12:35 2021 -> Update process terminated
Wed Apr 28 19:58:52 2021 -> --------------------------------------
Wed Apr 28 19:58:52 2021 -> freshclam daemon 0.103.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Wed Apr 28 19:58:52 2021 -> ClamAV update process started at Wed Apr 28 19:58:52 2021
Wed Apr 28 19:58:53 2021 -> daily database available for update (local version: 26153, remote version: 26154)
Wed Apr 28 19:58:55 2021 -> Testing database: '/var/lib/clamav/tmp.59d881fab4/clamav-e858cb0dd80ba05f0726cdd378525663.tmp-daily.cld' ...
Wed Apr 28 19:59:02 2021 -> Database test passed.
Wed Apr 28 19:59:03 2021 -> daily.cld updated (version: 26154, sigs: 3974700, f-level: 63, builder: raynman)
Wed Apr 28 19:59:03 2021 -> main database available for download (remote version: 59)
Wed Apr 28 20:00:07 2021 -> Testing database: '/var/lib/clamav/tmp.59d881fab4/clamav-dc8ea3a0ba7a2cc1b9f924c5a8328821.tmp-main.cvd' ...
Wed Apr 28 20:00:11 2021 -> Database test passed.
Wed Apr 28 20:00:11 2021 -> main.cvd updated (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
Wed Apr 28 20:00:11 2021 -> bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
Wed Apr 28 20:00:11 2021 -> WARNING: Clamd was NOT notified: Can't connect to clamd through /var/run/clamav/clamd.ctl: No such file or directory
Wed Apr 28 20:00:11 2021 -> --------------------------------------
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to