On 9/20/2018 8:59 AM, Dave Jones wrote:
I will have to check later if someone else can't check today. I am at
a customer location where I don't have good VPN connection out and
will be traveling this evening. I can check tomorrow if it can wait.
On 20.09.18 09:05, Kevin A. McGrail wrote:
It can wait. Matus also had the issue hitting my mirror and I know I
don't use a CDN.
On 20.09.18 16:05, Matus UHLAR - fantomas wrote:
I looked at update times and they are different each day - debian script
sleeps random number of seconds (up to one hour) in order to lower the
impact at mirror servers.
I have removed the "--fail" option from curl and will look at error message
if there's any.
I'll keep you updated and will fill bugreport if I'm able to find out
anything useful.
the problem repeated today
Sep 28 07:43:07.888 [7018] dbg: http: /usr/bin/curl -s -L -O --remote-time -g
--max-redirs 2 --connect-timeout 30 --max-time 300 -o 1842077.tar.gz --
http://sa-update.spamassassin.org/1842077.tar.gz
Sep 28 07:43:21.973 [7018] dbg: http: process [7019], exit status: 4608
Sep 28 07:43:21.973 [7018] dbg: channel: selected mirror
http://sa-update.space-pro.be
Sep 28 07:43:21.974 [7018] dbg: http: url:
http://sa-update.space-pro.be/1842077.tar.gz
Sep 28 07:43:21.974 [7018] dbg: http: downloading to:
/var/lib/spamassassin/3.004000/updates_spamassassin_org/1842077.tar.gz, update
Sep 28 07:43:21.974 [7018] dbg: util: executable for curl was found at
/usr/bin/curl
Sep 28 07:43:21.974 [7018] dbg: http: /usr/bin/curl -s -L -O --remote-time -g
--max-redirs 2 --connect-timeout 30 --max-time 300 -o 1842077.tar.gz -z
1842077.tar.gz -- http://sa-update.space-pro.be/1842077.tar.gz
Sep 28 07:43:22.304 [7018] dbg: http: process [7041], exit status: 0
Sep 28 07:43:22.305 [7018] dbg: http: url:
http://sa-update.space-pro.be/1842077.tar.gz.sha1
Sep 28 07:43:22.305 [7018] dbg: http: downloading to:
/var/lib/spamassassin/3.004000/updates_spamassassin_org/1842077.tar.gz.sha1, new
Sep 28 07:43:22.305 [7018] dbg: util: executable for curl was found at
/usr/bin/curl
Sep 28 07:43:22.305 [7018] dbg: http: /usr/bin/curl -s -L -O --remote-time -g
--max-redirs 2 --connect-timeout 30 --max-time 300 -o 1842077.tar.gz.sha1 --
http://sa-update.space-pro.be/1842077.tar.gz.sha1
Sep 28 07:43:22.376 [7018] dbg: http: process [7043], exit status: 0
Sep 28 07:43:22.376 [7018] dbg: http: url:
http://sa-update.space-pro.be/1842077.tar.gz.asc
Sep 28 07:43:22.377 [7018] dbg: http: downloading to:
/var/lib/spamassassin/3.004000/updates_spamassassin_org/1842077.tar.gz.asc, new
Sep 28 07:43:22.377 [7018] dbg: util: executable for curl was found at
/usr/bin/curl
Sep 28 07:43:22.377 [7018] dbg: http: /usr/bin/curl -s -L -O --remote-time -g
--max-redirs 2 --connect-timeout 30 --max-time 300 -o 1842077.tar.gz.asc --
http://sa-update.space-pro.be/1842077.tar.gz.asc
Sep 28 07:43:22.446 [7018] dbg: http: process [7045], exit status: 0
Sep 28 07:43:22.446 [7018] dbg: sha1: verification wanted:
cb1b907b4f590fe24d0744cf60939685d51b3443
Sep 28 07:43:22.446 [7018] dbg: sha1: verification result:
953efe8f531a5a87f6d2d5a65b78b05e55599abc
channel: SHA1 verification failed, channel failed
# ls -lctr --full-time 1842077.*
-rw-r--r-- 1 debian-spamd debian-spamd 1 2018-09-28 07:43:21.967880543 +0200
1842077.tar.gz
-rw-r--r-- 1 debian-spamd debian-spamd 113 2018-09-28 07:43:22.371884772 +0200
1842077.tar.gz.sha1
-rw-r--r-- 1 debian-spamd debian-spamd 819 2018-09-28 07:43:22.443885519 +0200
1842077.tar.gz.asc
# hd 1842077.tar.gz
00000000 1f |.|
00000001
Sep 28 07:43:23 fgt
date=2018-09-28,time=07:43:23,devname=xx,devid=xy,logid=0000000013,type=traffic,subtype=forward,level=notice,vd=root,srcip=192.168.1.1,srcport=52411,srcintf="internal",dstip=176.28.55.20,dstport=80,dstintf="wan1",poluuid=9a0df156-900e-51e8-d4d5-7b4de8e07615,sessionid=87366444,proto=6,action=close,policyid=62,policytype=policy,dstcountry="France",srccountry="Reserved",trandisp=snat,transip=195.80.174.159,transport=52411,service="HTTP",duration=1,sentbyte=470,rcvdbyte=327,sentpkt=6,rcvdpkt=4,appcat="unscanned",wanin=111,wanout=150,lanin=150,lanout=111
Sep 28 07:43:23 fgt
date=2018-09-28,time=07:43:23,devname=xx,devid=xy,logid=0000000013,type=traffic,subtype=forward,level=notice,vd=root,srcip=192.168.1.1,srcport=52412,srcintf="internal",dstip=176.28.55.20,dstport=80,dstintf="wan1",poluuid=9a0df156-900e-51e8-d4d5-7b4de8e07615,sessionid=87366446,proto=6,action=close,policyid=62,policytype=policy,dstcountry="France",srccountry="Reserved",trandisp=snat,transip=195.80.174.159,transport=52412,service="HTTP",duration=1,sentbyte=425,rcvdbyte=550,sentpkt=6,rcvdpkt=4,appcat="unscanned",wanin=334,wanout=105,lanin=105,lanout=334
Sep 28 07:43:23 fgt
date=2018-09-28,time=07:43:23,devname=xx,devid=xy,logid=0000000013,type=traffic,subtype=forward,level=notice,vd=root,srcip=192.168.1.1,srcport=52413,srcintf="internal",dstip=176.28.55.20,dstport=80,dstintf="wan1",poluuid=9a0df156-900e-51e8-d4d5-7b4de8e07615,sessionid=87366448,proto=6,action=close,policyid=62,policytype=policy,dstcountry="France",srccountry="Reserved",trandisp=snat,transip=195.80.174.159,transport=52413,service="HTTP",duration=1,sentbyte=424,rcvdbyte=1272,sentpkt=6,rcvdpkt=4,appcat="unscanned",wanin=1056,wanout=104,lanin=104,lanout=1056
I can of course suspect our fgt firewall from having problems, but logs from
server would be great.
source IP: 195.80.174.159
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
You have the right to remain silent. Anything you say will be misquoted,
then used against you.
