On Wed, 17 Jul 2024, j via clamav-users wrote:
Hello,
I have set up cvdupdate on my server and apache to serve the files - no
issues there, cvdupdate checks and gets the latest updates.
Issue is with downstream servers. I can curl the files directly, but
freshclam wont get them.
I've set the following in freshclam.conf:
DNSDatabaseInfo no
DatabaseMirror https://cvdupdate.host/db
But on running freshclam I am still getting:
# freshclam --debug
ClamAV update process started at Wed Jul 17 15:39:10 2024
WARNING: Can't query no
WARNING: Invalid DNS reply. Falling back to HTTP mode.
WARNING: FreshClam previously received error code 429 or 403 from the
ClamAV Content Delivery Network (CDN).
This means that you have been rate limited or blocked by the CDN.
1. Verify that you're running a supported ClamAV version.
See https://docs.clamav.net/faq/faq-eol.html for details.
2. Run FreshClam no more than once an hour to check for updates.
FreshClam should check DNS first to see if an update is needed.
3. If you have more than 10 hosts on your network attempting to download,
it is recommended that you set up a private mirror on your network using
cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
CDN and your own network.
4. Please do not open a ticket asking for an exemption from the rate limit,
it will not be granted.
WARNING: You are still on cool-down until after: 2024-07-17 18:32:06
Any assistance would be appreciated please.
https://pypi.org/project/cvdupdate/
suggests that the downstream clients need freshclam.conf to have:
DatabaseMirror http://localhost:8000
- but I imagine that localhost should be replaced by the name of
your local mirror; port 8000 may also need tuning ...
Depending upon your time zone, fetchclam on your mirror may be
working now, but don't try it too frequently
or you will be blocked again.
--
Andrew C. Aitchison Kendal, UK
and...@aitchison.me.uk
_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat
