[sanesecurity] Re: Problem with connecting with SaneSecurity

  • From: Sujit Acharyya-Choudhury <S.Choudhury@xxxxxxxxxxxxxxxxx>
  • To: <sanesecurity@xxxxxxxxxxxxx>
  • Date: Wed, 27 Oct 2010 11:03:00 +0100

Thanks Bill,
All is fine now.  I had a comment line - which I know should not be have
been there.

Thanks again.

Sujit

-----Original Message-----
From: sanesecurity-bounce@xxxxxxxxxxxxx
[mailto:sanesecurity-bounce@xxxxxxxxxxxxx] On Behalf Of Bill Landry
Sent: 26 October 2010 18:20
To: sanesecurity@xxxxxxxxxxxxx
Subject: [sanesecurity] Re: Problem with connecting with SaneSecurity

On 10/26/2010 6:24 AM, Sujit Acharyya-Choudhury wrote:
> Ever since I upgraded the script and config supplied by Bill Landry, I
> am having problem with connecting to the SaneSecurity mirror sites.
>
> Here are some examples:
>
> Oct 26 12:06:30 INFO - Script was run manually
>
> Oct 26 12:06:31 INFO - Sanesecurity mirror site used: loana.noovea.fr
> 88.191.80.151
>
> Oct 26 12:06:31 WARNING - Connection to loana.noovea.fr 88.191.80.151
> failed - Trying next mirror site...
>
> Oct 26 12:06:31 INFO - Sanesecurity mirror site used:
> svetlana.ability-network.net 91.121.188.82
>
> Oct 26 12:06:31 WARNING - Connection to svetlana.ability-network.net
> 91.121.188.82 failed - Trying next mirror site...
>
> Oct 26 12:06:31 INFO - Sanesecurity mirror site used: dg.feron.de
> 93.90.180.147
>
> Oct 26 12:06:31 WARNING - Connection to dg.feron.de 93.90.180.147
failed
> - Trying next mirror site...
>
> Oct 26 12:06:31 INFO - Sanesecurity mirror site used:
postfix.charite.de
> 141.42.206.35
>
> Oct 26 12:06:31 WARNING - Connection to postfix.charite.de
141.42.206.35
> failed- Trying next mirror site...
>
> Oct 26 12:06:31 INFO - Sanesecurity mirror site used: clamav.us.es
> 150.214.142.197
>
> Oct 26 12:06:31 WARNING - Connection to clamav.us.es 150.214.142.197
> failed - Trying next mirror site...
>
> Oct 26 12:06:31 INFO - Sanesecurity mirror site used: mail.inetmsg.com
> 173.10.94.185
>
> ...........
>
> I have the proxy set as follows:
>
> rsync_proxy="owl.wmin.ac.uk:873" - it used to be
> rsync_proxy="wwwcache.wmin.ac.uk:873"
>
> curl_proxy="-x wwwcache.wmin.ac.uk:3128"
>
> Is there anything obviously wrong?

The problem is in your config file in the Sanesecurity section.  Here is

what I am seeing on my rsync server:

2010/10/26 07:47:44 [30459] connect from isls-clamav2.wmin.ac.uk 
(161.74.14.207)
2010/10/26 07:47:45 [30459] rsync on sanesecurity/ from 
isls-clamav2.wmin.ac.uk (161.74.14.207)
2010/10/26 07:47:45 [30459] building file list
2010/10/26 07:47:46 [30459] rsync: link_stat "#" (in sanesecurity) 
failed: No such file or directory (2)
2010/10/26 07:47:46 [30459] rsync: link_stat "#.sig" (in sanesecurity) 
failed: No such file or directory (2)
2010/10/26 07:47:46 [30459] rsync: link_stat "Medium" (in sanesecurity) 
failed: No such file or directory (2)
2010/10/26 07:47:46 [30459] rsync: link_stat "Medium.sig" (in 
sanesecurity) failed: No such file or directory (2)
2010/10/26 07:47:46 [30459] rsync: link_stat "false-positive" (in 
sanesecurity) failed: No such file or directory (2)
2010/10/26 07:47:46 [30459] rsync: link_stat "false-positive.sig" (in 
sanesecurity) failed: No such file or directory (2)
2010/10/26 07:47:46 [30459] rsync: link_stat "rating:" (in sanesecurity)

failed: No such file or directory (2)
2010/10/26 07:47:46 [30459] rsync: link_stat "rating:.sig" (in 
sanesecurity) failed: No such file or directory (2)

There should be nothing listed between the open and closing quotes in 
this section except signature databases (and the database names MUST be 
spelled correctly, as well):

ss_dbs="
    junk.ndb
    jurlbl.ndb
    phish.ndb
    rogue.hdb
    sanesecurity.ftm
    scam.ndb
    spamimg.hdb
    winnow_malware.hdb
    winnow_malware_links.ndb
"

Fix that and you should be good to go.

Regards,

Bill


--
The University of Westminster is a charity and a company limited by
guarantee.  Registration number: 977818 England.  Registered Office:
309 Regent Street, London W1B 2UW, UK.

Other related posts: