Thanks Micah.
That fixed it. Deleting freshclam.dat allowed it to connect to the local
mirror.
cheers

On Thu, Jul 18, 2024 at 6:25 AM Micah Snyder (micasnyd) <micas...@cisco.com>
wrote:

> Hi j,
>
> I see you are seeing this error, even though you're having it use your own
> private database mirror:
> "FreshClam previously received error code 429 or 403 from the ClamAV
> Content Delivery Network (CDN)."
>
> When freshclam fails to download because of a 429 or 403 error code the
> database mirror, it will record this in the freshclam.dat file next to
> the databases. Subsequent attempts to run freshclam will just check that
> file and self-rate limit until 24 hours have passed.  After that expires,
> freshclam will actually try to update again.
>
> I doubt your own private mirror served up a 429 or 403 error message, so
> it's possible you got that prior to switching over to your private
> mirror. To speed things up, try deleting the freshclam.dat file in your
> database directory, then try freshclam again.
>
> Regards,
> Micah
>
> Micah Snyder (they/them)
> ClamAV Development
> Talos
> Cisco Systems, Inc.
> ------------------------------
> *From:* clamav-users <clamav-users-boun...@lists.clamav.net> on behalf of
> j via clamav-users <clamav-users@lists.clamav.net>
> *Sent:* Wednesday, July 17, 2024 2:24 AM
> *To:* clamav-users@lists.clamav.net <clamav-users@lists.clamav.net>
> *Cc:* j <jcpars...@gmail.com>
> *Subject:* [clamav-users] Issue getting private local mirror to work
>
> Hello,
> I have set up cvdupdate on my server and apache to serve the files - no
> issues there, cvdupdate checks and gets the latest updates.
> Issue is with downstream servers.  I can curl the files directly, but
> freshclam wont get them.
> I've set the following in freshclam.conf:
> DNSDatabaseInfo no
> DatabaseMirror https://cvdupdate.host/db
>
> But on running freshclam I am still getting:
> # freshclam --debug
> ClamAV update process started at Wed Jul 17 15:39:10 2024
> WARNING: Can't query no
> WARNING: Invalid DNS reply. Falling back to HTTP mode.
> WARNING: FreshClam previously received error code 429 or 403 from the
> ClamAV Content Delivery Network (CDN).
> This means that you have been rate limited or blocked by the CDN.
>  1. Verify that you're running a supported ClamAV version.
>     See https://docs.clamav.net/faq/faq-eol.html for details.
>  2. Run FreshClam no more than once an hour to check for updates.
>     FreshClam should check DNS first to see if an update is needed.
>  3. If you have more than 10 hosts on your network attempting to download,
>     it is recommended that you set up a private mirror on your network
> using
>     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on
> the
>     CDN and your own network.
>  4. Please do not open a ticket asking for an exemption from the rate
> limit,
>     it will not be granted.
> WARNING: You are still on cool-down until after: 2024-07-17 18:32:06
>
> Any assistance would be appreciated please.
> Thanks
>
>
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Reply via email to