[SOLVED] FreshClam would not refresh on cron

[troublemaker]

Hello!

Well, may be I have troubles with my brain, or my hands aren't suited to manage ZCS/FOSS, but I can't make freshclam do the updates on regular basis. It just does not launch!

More, should I run it manually:

sudo freshclam --config-file=/opt/zimbra/conf/freshclam.conf -l /opt/zimbra/log/freshclam.log --datadir=/opt/zimbra/data/clamav/db

it runs just fine:

ClamAV update process started at Thu Apr 2 07:52:24 2009
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.94.2 Recommended version: 0.95
DON'T PANIC! Read Clam AntiVirus
Connecting via proxy.drsk.ru
main.cld is up to date (version: 50, sigs: 500667, f-level: 38, builder: sven)
Connecting via proxy.drsk.ru
Downloading daily-9191.cdiff [100%]
Downloading daily-9192.cdiff [100%]
Downloading daily-9193.cdiff [100%]
Downloading daily-9194.cdiff [100%]
Downloading daily-9195.cdiff [100%]
Downloading daily-9196.cdiff [100%]
daily.cld updated (version: 9196, sigs: 38248, f-level: 41, builder: mcichosz)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 38, recommended = 41
DON'T PANIC! Read Clam AntiVirus
Database updated (538915 signatures) from db.ru.clamav.net
Clamd successfully notified about the update.

All seems OK. Restarting ZCS:

ClamAV update process started at Thu Apr 2 08:00:30 2009
SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
See the FAQ at Clam AntiVirus for an explanation.
ERROR: Problem with internal logger (UpdateLogFile = /opt/zimbra/log/freshclam.log).
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.94.1 Recommended version: 0.95
DON'T PANIC! Read Clam AntiVirus
Connecting via proxy.drsk.ru
Downloading main-50.cdiff [100%]
main.cld updated (version: 50, sigs: 500667, f-level: 38, builder: sven)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 37, recommended = 38
DON'T PANIC! Read Clam AntiVirus
Connecting via proxy.drsk.ru
WARNING: getfile: daily-8543.cdiff not found on remote server (IP: 172.28.32.1)
WARNING: getpatch: Can't download daily-8543.cdiff from db.ru.clamav.net
WARNING: getfile: daily-8543.cdiff not found on remote server (IP: 172.28.32.1)
WARNING: getpatch: Can't download daily-8543.cdiff from db.ru.clamav.net
WARNING: getfile: daily-8543.cdiff not found on remote server (IP: 172.28.32.1)
WARNING: getpatch: Can't download daily-8543.cdiff from db.ru.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
daily.cvd updated (version: 9196, sigs: 38248, f-level: 41, builder: mcichosz)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 37, recommended = 41
DON'T PANIC! Read Clam AntiVirus
Database updated (538915 signatures) from db.ru.clamav.net
Clamd successfully notified about the update.

Feel the difference!
1. On LATER update it "updates" already brand new main.cld
2. It looks for OLDER diff-files, which are absent (of course!) and not neccessary.

More:

zimbra@ubuntu-1:~$ which freshclam
/usr/bin/freshclam

Yes, I have standalone ClamAV installation, but it is disabled after ZCS was installed.

Sometimes "auto-refresh" goes well, but last week I could not make FC run automatically.

In ~/zimbramon/crontabs I found NO file with word of "freshclam" inside:

zimbra@ubuntu-1:~$ cat ~/zimbramon/crontabs/*|grep -i freshclam
zimbra@ubuntu-1:~$

Any suggestions, please?

[uxbod]

Give this a try :- ClamAV - Reset Defs DB - Zimbra :: Wiki

[troublemaker]

Originally Posted by uxbod

Give this a try :- ClamAV - Reset Defs DB - Zimbra :: Wiki

Thank you, but it is not my case. I can manually launch FreshClam, but it will not be launched automatically on regular basis.

After restarting an antivirus component or entire ZCS, it updates once, and then waits for my kick, regardless of how many times/day it set to work in config file.

And it writes nothing into log in between startup and manual launch. I think, there is something wrong with scheduler.

:-(

What should I check, to make sure that schedule and other related parts are working normally?

Thank you.

[uxbod]

For some reason freshclam is dying as it should run as a daemon process. From my server

[zimbra@office texts]$ ps aux | grep freshclam
zimbra     973  0.0  0.0   1844   484 pts/0    S+   08:50   0:00 grep freshclam
zimbra    9926  0.0  0.0   3236  1304 ?        Ss   Mar31   0:00 /opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf -d --checks=12

Shutdown ZCS and make sure no old processes are running, clean up the def files as I posted in that link, and then start ZCS again. It is certainly worth a try.

[troublemaker]

OK, i did it via SSH

I'm not sure, how that happened, but I've seen "standalone" /usr/bin/freshclam...

After pkill that process and following your recommendations, I can see correct /opt/zimbra/clamav/bin/freshclam with correct parameters.

Here is 21:14 at my place, and I will check freshclam.log at morning in office.

Thank you.

p.s. kicking my own ass for did not tried ps|grep fresh

[uxbod]

fingers crossed for the morning.

[troublemaker]

Well, I'm not religious - an agnosticist, but your "finger cross" made its god-pleasing deed: dog /opt/zimbra/log/freshclam.log shows perfect results.

Thank you, uxbod, very much.

Marking thread as solved.