Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Awie
;Daniel J McDonald" <[EMAIL PROTECTED]> To: "ClamAV users ML" Sent: Tuesday, May 17, 2005 10:56 PM Subject: Re: [Clamav-users] Freshclam fall back to HTTP > On Tue, 2005-05-17 at 22:39 +0800, Awie wrote: > > Hi Guy, > > > > This is the captured text fr

Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Daniel J McDonald
On Tue, 2005-05-17 at 22:39 +0800, Awie wrote: > Hi Guy, > > This is the captured text from Ethereal (Text mode) > > I open 2 screen console > > Screen 1: > > [EMAIL PROTECTED] src]# tethereal -F libpcap -f udp add -V so we can see the packet details. -- Daniel J McDonald, CCIE # 2495, CNX

Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Awie
, sigs: 1320, f-level: 5, builder: arnaud) Please advise. Thx & Rgds, Awie - Original Message - From: "Guy Van Den Bergh" <[EMAIL PROTECTED]> To: "ClamAV users ML" Sent: Tuesday, May 17, 2005 9:46 PM Subject: Re: [Clamav-users] Freshclam fall back to HTTP

Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Guy Van Den Bergh
On Tue, 2005-05-17 at 15:34, Awie wrote: > > > > All is looking good as far as I'm concerned. > > I would start sniffing on your server (with ethereal) to see what's > > happening on the wire. Any experience with that? > > > > I never use Ethereal (for Linux) before. However, I will learn how to u

Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Awie
> > > > Below attached lines in the file > > All is looking good as far as I'm concerned. > I would start sniffing on your server (with ethereal) to see what's > happening on the wire. Any experience with that? > I never use Ethereal (for Linux) before. However, I will learn how to use it. I will

Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Guy Van Den Bergh
On Tue, 2005-05-17 at 15:09, Awie wrote: > I use a new freshclam.conf. > > > -- > > What is your configuration? > > Does it have a DNSDatabaseInfo directive? > > Maybe you're still using a configuration file from a previous version, > > from before the DNSDatabasInfo days? > > Below attached lin

Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Awie
> This looks fine to me. > My DNS servers were messing up the expiration time (900 seconds right > here, as it should be...). > > In my freshclam.conf, I have a section that says: > > # Use DNS to verify virus database version. Freshclam uses DNS TXT > records > # to verify database and software ve

Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Guy Van Den Bergh
On Tue, 2005-05-17 at 13:53, Awie wrote: > Below the result of dig in my machine. It seems can reach > current.cvd.clamav.net. > > Please advise. > ===SNIP=== > > [EMAIL PROTECTED] root]# dig current.cvd.clamav.net txt > > ; <<>> DiG 9.2.4 <<>> current.cvd.clamav.net txt > ;; global options:

Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Awie
Hello, > > System time? > > Or maybe your local DNS servers. > > I had a similar problem a few weeks ago. > I was using Windows 2000 DNS servers, and they were having trouble > caching the TXT record for ClamAV updates. Restarting the DNS server > services on the Windows machines helped me out. >

Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Awie
> On Tue, 2005-05-17 at 12:12, Tomasz Kojm wrote: > > On Tue, 17 May 2005 12:50:58 +0800 > > "Awie" <[EMAIL PROTECTED]> wrote: > > > > WARNING: DNS record is older than 3 hours. > > > > [...] > > > > > but why Freshclam cannot run in DNS? What things should I fix? > > > > System time? System t

Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Guy Van Den Bergh
On Tue, 2005-05-17 at 12:12, Tomasz Kojm wrote: > On Tue, 17 May 2005 12:50:58 +0800 > "Awie" <[EMAIL PROTECTED]> wrote: > > WARNING: DNS record is older than 3 hours. > > [...] > > > but why Freshclam cannot run in DNS? What things should I fix? > > System time? Or maybe your local DNS server

Re: [Clamav-users] Freshclam fall back to HTTP

2005-05-17 Thread Tomasz Kojm
On Tue, 17 May 2005 12:50:58 +0800 "Awie" <[EMAIL PROTECTED]> wrote: > All, > > I cannot run Freshclam in DNS mode, it always fall back to HTTP. Below > attached the message from my machine; > > [EMAIL PROTECTED] root]# freshclam > ClamAV update process started at Tue May 17 12:43:32 2005 > WARN