[sanesecurity] unable to connect to Sanesecurity mirror sites !

  • From: Paul Griffith <paulg@xxxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Tue, 20 Apr 2010 09:50:46 -0400

Greetings,

It has been a while since I used the Sanesecurity signatures, but the
latest PDF malware has forced me back to using it. I am using Bill
Landry clamav-unofficial-sigs.sh download script, version 3.7 and I
can't connect any of the mirror sites.

FYI..


--snip ---
Access to all Sanesecurity mirror sites failed - Check for connectivity
issues or signature database name(s) misspelled in the script's
configuration file.

======================================================================
MalwarePatrol mbl.ndb Database File Update
======================================================================

  % Total    % Received % Xferd  Average Speed   Time    Time     Time
Current
                                 Dload  Upload   Total   Spent    Left
Speed
100  133k    0  133k    0     0  53408      0 --:--:--  0:00:02 --:--:--
65190

Testing updated MalwarePatrol database file: mbl.ndb
Clamscan reports Sanesecurity mbl.ndb database integrity tested good
Successfully updated MalwarePatrol production database file: mbl.ndb
-----snip---

Here are the signatures I am requesting!

ss_dbs="
   rouge.hdb
   sanesecurity.ftm
   sigwhitelist.ign2
   spamimg.hdb
   spamattach.hdb
   winnow_malware.hdb
   winnow_extended_malware.hdb
   winnow_attachments.hdb
"

I don't believe that they are all down, There must be a misconfiguration
on my end.


Any hunting tips?

Regards,
Paul


--- More log output ---
Apr 20 08:45:21 INFO - Script was run manually
Apr 20 08:45:21 INFO - Sanesecurity mirror site used: dg.feron.de
93.90.180.147
Apr 20 08:45:22 WARNING - Connection to dg.feron.de 93.90.180.147 failed
- Trying next mirror site...
Apr 20 08:45:22 INFO - Sanesecurity mirror site used:
spamcop03.sentechsa.net 66.18.67.75
Apr 20 08:45:28 WARNING - Connection to spamcop03.sentechsa.net
66.18.67.75 failed - Trying next mirror site...
Apr 20 08:45:28 INFO - Sanesecurity mirror site used:
patroklos.noc.ntua.gr 147.102.222.211
Apr 20 08:45:30 WARNING - Connection to patroklos.noc.ntua.gr
147.102.222.211 failed - Trying next mirror site...
Apr 20 08:45:30 INFO - Sanesecurity mirror site used:
resolv3.vianetworks.de 194.77.111.24
Apr 20 08:45:31 WARNING - Connection to resolv3.vianetworks.de
194.77.111.24 failed - Trying next mirror site...
Apr 20 08:45:31 INFO - Sanesecurity mirror site used: www01.masbytes.es
213.194.159.34
Apr 20 08:45:33 WARNING - Connection to www01.masbytes.es 213.194.159.34
failed - Trying next mirror site...
Apr 20 08:45:33 INFO - Sanesecurity mirror site used:
sanesecurity.retrosnub.co.uk 78.129.234.10
Apr 20 08:45:34 WARNING - Connection to sanesecurity.retrosnub.co.uk
78.129.234.10 failed - Trying next mirror site...
Apr 20 08:45:34 INFO - Sanesecurity mirror site used:
ns.km33603.keymachine.de 87.118.124.191
Apr 20 08:45:36 WARNING - Connection to ns.km33603.keymachine.de
87.118.124.191 failed - Trying next mirror site...
Apr 20 08:45:36 INFO - Sanesecurity mirror site used:
svetlana.ability-network.net 91.121.188.82
Apr 20 08:45:37 WARNING - Connection to svetlana.ability-network.net
91.121.188.82 failed - Trying next mirror site...
Apr 20 08:45:37 INFO - Sanesecurity mirror site used: mail.inetmsg.com
173.10.94.185
Apr 20 08:45:39 WARNING - Connection to mail.inetmsg.com 173.10.94.185
failed - Trying next mirror site...
Apr 20 08:45:39 INFO - Sanesecurity mirror site used: loana.noovea.fr
88.191.80.151
Apr 20 08:45:40 WARNING - Connection to loana.noovea.fr 88.191.80.151
failed - Trying next mirror site...
Apr 20 08:45:40 INFO - Sanesecurity mirror site used: nbi.kozstyle.org
84.19.167.43
Apr 20 08:45:41 WARNING - Connection to nbi.kozstyle.org 84.19.167.43
failed - Trying next mirror site...
Apr 20 08:45:41 INFO - Sanesecurity mirror site used:
mail.us.tx1.zoidial.com 72.249.91.126
Apr 20 08:45:42 WARNING - Connection to mail.us.tx1.zoidial.com
72.249.91.126 failed - Trying next mirror site...
Apr 20 08:45:42 INFO - Sanesecurity mirror site used: clamav.us.es
150.214.142.197
Apr 20 08:45:46 WARNING - Connection to clamav.us.es 150.214.142.197
failed - Trying next mirror site...
Apr 20 08:45:46 INFO - Sanesecurity mirror site used: postfix.charite.de
141.42.206.35
Apr 20 08:45:47 WARNING - Connection to postfix.charite.de 141.42.206.35
failed - Trying next mirror site...
Apr 20 08:45:47 INFO - Sanesecurity mirror site used:
update2.fslupdate.com 69.63.144.20
Apr 20 08:45:48 WARNING - Connection to update2.fslupdate.com
69.63.144.20 failed - Trying next mirror site...
Apr 20 08:45:48 INFO - Sanesecurity mirror site used:
mx0.roessner-net.de 78.46.253.227
Apr 20 08:45:49 WARNING - Connection to mx0.roessner-net.de
78.46.253.227 failed - Trying next mirror site...
Apr 20 08:45:49 INFO - Sanesecurity mirror site used:
update1.fslupdate.com 69.63.144.18
Apr 20 08:45:50 WARNING - Connection to update1.fslupdate.com
69.63.144.18 failed - Trying next mirror site...
Apr 20 08:45:50 WARNING - Access to all Sanesecurity mirror sites failed
- Check for connectivity issues
Apr 20 08:45:50 WARNING - or signature database name(s) misspelled in
the script's configuration file.
Apr 20 08:45:50 INFO - Next MalwarePatrol download will be performed in
approximately 5 hour(s), 55 minute(s)
Apr 20 08:45:50 INFO - Database reloading has been disabled in the
configuration file.




Other related posts: