Your message dated Thu, 11 Aug 2016 22:12:38 +0200
with message-id <20160811201237.32uqhbbokprw7...@breakpoint.cc>
and subject line Re: [Pkg-clamav-devel] Bug#823513: clamav-freshclam: freshclam
fails to download daily.cvd and clamav do not start
has caused the Debian Bug report #823513,
regarding clamav-freshclam: freshclam fails to download daily.cvd and clamav do
not start
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
823513: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823513
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: clamav-freshclam
Version: 0.99+dfsg-0+deb8u2
Severity: important
Dear Maintainer,
After installing clamav-freshclam I got these in syslog:
May 5 15:31:28 jessie kernel: [ 3360.972917] device eth0 left promiscuous mode
May 5 15:32:08 jessie freshclam[4851]: ClamAV update process started at Thu
May 5 15:32:08 2016
May 5 15:32:09 jessie freshclam[4851]: WARNING: Your ClamAV installation is
OUTDATED!
May 5 15:32:09 jessie freshclam[4851]: WARNING: Local version: 0.99
Recommended version: 0.99.2
May 5 15:32:09 jessie freshclam[4851]: DON'T PANIC! Read
http://www.clamav.net/support/faq
May 5 15:32:09 jessie freshclam[4851]: main.cvd is up to date (version: 57,
sigs: 4218790, f-level: 60, builder: amishhammer)
May 5 15:32:09 jessie freshclam[4851]: WARNING: Can't download daily.cvd from
db.local.clamav.net
May 5 15:32:09 jessie freshclam[4851]: Trying again in 5 secs...
... (other 3 times)
May 5 15:32:29 jessie freshclam[4851]: ClamAV update process started at Thu
May 5 15:32:29 2016
May 5 15:32:29 jessie freshclam[4851]: WARNING: Your ClamAV installation is
OUTDATED!
May 5 15:32:29 jessie freshclam[4851]: WARNING: Local version: 0.99
Recommended version: 0.99.2
May 5 15:32:29 jessie freshclam[4851]: DON'T PANIC! Read
http://www.clamav.net/support/faq
May 5 15:32:29 jessie freshclam[4851]: main.cvd is up to date (version: 57,
sigs: 4218790, f-level: 60, builder: amishhammer)
May 5 15:32:29 jessie freshclam[4851]: ERROR: Can't download daily.cvd from
db.local.clamav.net
May 5 15:32:29 jessie freshclam[4851]: Giving up on db.local.clamav.net...
May 5 15:32:29 jessie freshclam[4851]: ClamAV update process started at Thu
May 5 15:32:29 2016
May 5 15:32:29 jessie freshclam[4851]: WARNING: Your ClamAV installation is
OUTDATED!
May 5 15:32:29 jessie freshclam[4851]: WARNING: Local version: 0.99
Recommended version: 0.99.2
May 5 15:32:29 jessie freshclam[4851]: DON'T PANIC! Read
http://www.clamav.net/support/faq
May 5 15:32:29 jessie freshclam[4851]: main.cvd is up to date (version: 57,
sigs: 4218790, f-level: 60, builder: amishhammer)
May 5 15:32:29 jessie freshclam[4851]: ERROR: Can't download daily.cvd from
database.clamav.net
May 5 15:32:29 jessie freshclam[4851]: Giving up on database.clamav.net...
May 5 15:32:29 jessie freshclam[4851]: Update failed. Your network may be down
or none of the mirrors listed in /etc/clamav/freshclam.conf is working. Check
http://www.clamav.net/doc/mirrors-faq.html for possible reasons.
So there is no /var/lib/clamav/daily.cvd downloaded and clamav-daemon was
not started, silently failing (no trace in syslog also). I just got it
because amavis was angry, and then I got the problem with:
root@jessie:~# systemctl status clamav-daemon
● clamav-daemon.service - Clam AntiVirus userspace daemon
Loaded: loaded (/lib/systemd/system/clamav-daemon.service; enabled)
Active: inactive (dead) since gio 2016-05-05 15:45:31 CEST; 28s ago
start condition failed at gio 2016-05-05 15:45:53 CEST; 6s ago
ConditionPathExistsGlob=/var/lib/clamav/daily.{c[vl]d,inc} was not
met
I have jessie-updates in my sources list, and I could just plain take the file
with wget, so it's not a network problem.
I could solve the issue downloading the file with:
cd /var/lib/clamav/
wget http://database.clamav.net/daily.cvd
after this clamav-daemon was startable, but the clamav-freshclam package
now is just broken, do not work, and the current configuration prevent
also clamav-daemon to work.
-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav
Config file: clamd.conf
-----------------------
LogFile = "/var/log/clamav/clamav.log"
StatsHostID = "auto"
StatsEnabled disabled
StatsPEDisabled = "yes"
StatsTimeout = "10"
LogFileUnlock disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogClean disabled
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
ExtendedDetectionInfo = "yes"
PidFile disabled
TemporaryDirectory disabled
DatabaseDirectory = "/var/lib/clamav"
OfficialDatabaseOnly disabled
LocalSocket = "/var/run/clamav/clamd.ctl"
LocalSocketGroup = "clamav"
LocalSocketMode = "666"
FixStaleSocket = "yes"
TCPSocket disabled
TCPAddr disabled
MaxConnectionQueueLength = "15"
StreamMaxLength = "26214400"
StreamMinPort = "1024"
StreamMaxPort = "2048"
MaxThreads = "12"
ReadTimeout = "180"
CommandReadTimeout = "5"
SendBufTimeout = "200"
MaxQueue = "100"
IdleTimeout = "30"
ExcludePath disabled
MaxDirectoryRecursion = "15"
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
CrossFilesystems = "yes"
SelfCheck = "3600"
DisableCache disabled
VirusEvent disabled
ExitOnOOM disabled
AllowAllMatchScan = "yes"
Foreground disabled
Debug disabled
LeaveTemporaryFiles disabled
User = "clamav"
AllowSupplementaryGroups = "yes"
Bytecode = "yes"
BytecodeSecurity = "TrustSigned"
BytecodeTimeout = "60000"
BytecodeUnsigned disabled
BytecodeMode = "Auto"
DetectPUA disabled
ExcludePUA disabled
IncludePUA disabled
AlgorithmicDetection = "yes"
ScanPE = "yes"
ScanELF = "yes"
DetectBrokenExecutables disabled
ScanMail = "yes"
ScanPartialMessages disabled
PhishingSignatures = "yes"
PhishingScanURLs = "yes"
PhishingAlwaysBlockCloak disabled
PhishingAlwaysBlockSSLMismatch disabled
PartitionIntersection disabled
HeuristicScanPrecedence disabled
StructuredDataDetection disabled
StructuredMinCreditCardCount = "3"
StructuredMinSSNCount = "3"
StructuredSSNFormatNormal = "yes"
StructuredSSNFormatStripped disabled
ScanHTML = "yes"
ScanOLE2 = "yes"
OLE2BlockMacros disabled
ScanPDF = "yes"
ScanSWF = "yes"
ScanArchive = "yes"
ArchiveBlockEncrypted disabled
ForceToDisk disabled
MaxScanSize = "104857600"
MaxFileSize = "26214400"
MaxRecursion = "16"
MaxFiles = "10000"
MaxEmbeddedPE = "10485760"
MaxHTMLNormalize = "10485760"
MaxHTMLNoTags = "2097152"
MaxScriptNormalize = "5242880"
MaxZipTypeRcg = "1048576"
MaxPartitions = "50"
MaxIconsPE = "100"
PCREMatchLimit = "10000"
PCRERecMatchLimit = "5000"
PCREMaxFileSize = "26214400"
ScanOnAccess disabled
OnAccessMountPath disabled
OnAccessIncludePath disabled
OnAccessExcludePath disabled
OnAccessExcludeUID disabled
OnAccessMaxFileSize = "5242880"
OnAccessDisableDDD disabled
OnAccessPrevention disabled
OnAccessExtraScanning disabled
DevACOnly disabled
DevACDepth disabled
DevPerformance disabled
DevLiblog disabled
DisableCertCheck disabled
Config file: freshclam.conf
---------------------------
StatsHostID disabled
StatsEnabled disabled
StatsTimeout disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
PidFile disabled
DatabaseDirectory = "/var/lib/clamav"
Foreground disabled
Debug disabled
AllowSupplementaryGroups disabled
UpdateLogFile = "/var/log/clamav/freshclam.log"
DatabaseOwner = "clamav"
Checks = "24"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.local.clamav.net", "database.clamav.net"
PrivateMirror disabled
MaxAttempts = "5"
ScriptedUpdates = "yes"
TestDatabases = "yes"
CompressLocalDatabase disabled
ExtraDatabase disabled
DatabaseCustomURL disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = "/etc/clamav/clamd.conf"
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = "30"
ReceiveTimeout = "30"
SubmitDetectionStats disabled
DetectionStatsCountry disabled
DetectionStatsHostID disabled
SafeBrowsing disabled
Bytecode = "yes"
clamav-milter.conf not found
Software settings
-----------------
Version: 0.99
Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2
LIBXML2 PCRE ICONV JSON JIT
Database information
--------------------
Database directory: /var/lib/clamav
main.cvd: version 57, sigs: 4218790, built on Thu Mar 17 00:17:06 2016
daily.cvd: version 21473, sigs: 83897, built on Thu Mar 24 21:25:24 2016
Total number of signatures: 4302687
Platform information
--------------------
uname: Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt25-2 (2016-04-08) x86_64
OS: linux-gnu, ARCH: x86_64, CPU: x86_64
Full OS version: Debian GNU/Linux 8.4 (jessie)
zlib version: 1.2.8 (1.2.8), compile flags: a9
Triple: x86_64-pc-linux-gnu
CPU: nocona, Little-endian
platform id: 0x0a2151510804090201040902
Build information
-----------------
GNU C: 4.9.2 (4.9.2)
GNU C++: 4.9.2 (4.9.2)
CPPFLAGS: -D_FORTIFY_SOURCE=2
CFLAGS: -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -Wall
-D_FILE_OFFSET_BITS=64 -fno-strict-aliasing -D_LARGEFILE_SOURCE
-D_LARGEFILE64_SOURCE
CXXFLAGS:
LDFLAGS: -Wl,-z,relro -Wl,--as-needed -lpcre
Configure: '--build=x86_64-linux-gnu' '--prefix=/usr'
'--includedir=/usr/include' '--mandir=/usr/share/man'
'--infodir=/usr/share/info' '--sysconfdir=/etc' '--localstatedir=/var'
'--libexecdir=/usr/lib/clamav' '--disable-maintainer-mode'
'--disable-dependency-tracking' 'CFLAGS=-g -O2 -fstack-protector-strong
-Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64'
'CPPFLAGS=-D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fstack-protector-strong
-Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64'
'LDFLAGS=-Wl,-z,relro -Wl,--as-needed' '--with-dbdir=/var/lib/clamav'
'--sysconfdir=/etc/clamav' '--disable-clamav' '--disable-unrar'
'--enable-milter' '--enable-dns-fix' '--with-libjson' '--with-gnu-ld'
'-with-system-llvm=/usr/bin/llvm-config' '--with-llvm-linking=dynamic'
'--with-systemdsystemunitdir=/lib/systemd/system' 'build_alias=x86_64-linux-gnu'
sizeof(void*) = 8
Engine flevel: 81, dconf: 81
--- data dir ---
total 108752
-rw-r--r-- 1 root root 2208833 Mar 24 21:25 daily.cvd
-rw-r--r-- 1 clamav clamav 109143933 May 5 13:12 main.cvd
-rw------- 1 clamav clamav 104 May 5 15:32 mirrors.dat
-- System Information:
Debian Release: 8.4
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages clamav-freshclam depends on:
ii clamav-base 0.99+dfsg-0+deb8u2
ii debconf [debconf-2.0] 1.5.56
ii dpkg 1.17.26
ii init-system-helpers 1.22
ii libc6 2.19-18+deb8u4
ii libclamav7 0.99+dfsg-0+deb8u2
ii libssl1.0.0 1.0.1k-3+deb8u5
ii logrotate 3.8.7-1+b1
ii lsb-base 4.1+Debian13+nmu1
ii procps 2:3.3.9-9
ii ucf 3.0030
ii zlib1g 1:1.2.8.dfsg-2+b1
clamav-freshclam recommends no packages.
Versions of packages clamav-freshclam suggests:
pn apparmor <none>
pn clamav-docs <none>
-- debconf information:
clamav-freshclam/PrivateMirror:
clamav-freshclam/local_mirror: db.local.clamav.net
clamav-freshclam/update_interval: 24
clamav-freshclam/NotifyClamd: true
clamav-freshclam/LogRotate: true
clamav-freshclam/internet_interface:
clamav-freshclam/SafeBrowsing: false
clamav-freshclam/proxy_user:
clamav-freshclam/autoupdate_freshclam: daemon
clamav-freshclam/Bytecode: true
clamav-freshclam/http_proxy:
--- End Message ---
--- Begin Message ---
On 2016-05-18 23:38:11 [+0200], Sebastian Andrzej Siewior wrote:
> On 2016-05-06 23:51:13 [+0200], Sebastian Andrzej Siewior wrote:
> > > Update failed. Your network may be down or none of the mirrors listed in
> > > /etc/clamav/freshclam.conf is working. Check
> > > http://www.clamav.net/doc/mirrors-faq.html for possible reasons.
> >
> > To get rid of the "Ignoring mirror … due to previous errors" you need to
> > either wait or remove /var/lib/clamav/mirrors.dat - that is where it
> > information comes from.
> > Then you can try again and show what goes wrong.
>
> One thing that comes to mind is that it could blacklist the two servers
> if they did not have the signatures *yet*
> I assume the problem is gone, can you please confirm?
I belive freshclam blacklisted the two .it mirrors and then run out of
mirrors and couldn't retry later until the blacklist expired. It might
got blaclisted due to connection errors or because the two mirrors were
out of date.
Closing since the original reported does not complain.
Sebastian
--- End Message ---
_______________________________________________
Pkg-clamav-devel mailing list
Pkg-clamav-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
