Herbert Poetzl wrote:
> On Fri, May 22, 2009 at 07:46:47PM +0200, Jarry wrote:
>>
>> In one of my vserver-guests (gentoo) I installed f-prot, which
>> I want to use for mail scanning. Problem is, I can not update
>> virus signatures. Whenever I try it (/opt/f-prot/fpudate),
>> I always get this error:
>>
>> ---------------------------------------------
>> *** /var/log/messages (vserver guest) ***
>> May 22 17:13:10 mail fpupdate: Debug: User agent "FPAV_Updater/6.0.2
>> (UNIX; Linux; 2.6.22-vs2.2.0.7-gentoo; ; x86_64)"
>> May 22 17:13:10 mail fpupdate: Update server - Valid license-key
>> May 22 17:13:10 mail fpupdate: Debug: Server
>> srv3.directupdates.f-prot.net (weight 10)
>> May 22 17:13:10 mail fpupdate: Debug: Server index 2
>> May 22 17:13:10 mail fpupdate: Debug: Using server
>> srv3.directupdates.f-prot.net
>> May 22 17:13:10 mail fpupdate: Attempting to retrieve the latest
>> antivir.def update from update server
>> May 22 17:13:10 mail fpupdate: Debug: User agent "FPAV_Updater/6.0.2
>> (UNIX; Linux; 2.6.22-vs2.2.0.7-gentoo; ; x86_64)"
>> May 22 17:14:02 mail fpupdate: Warning: Network - Connection failed
>> (23), trying again...
>> May 22 17:14:08 mail fpupdate: Warning: Network - Connection failed
>> (23), trying again...
>> May 22 17:14:13 mail fpupdate: Warning: Network - Connection failed
>> (23), trying again...
>> May 22 17:14:18 mail fpupdate: Error: Incorrect checksum of downloaded
>> update
>> ---------------------------------------------
>
>> In console I can see update counter, and this problem happens
>> always exactly at 43% (~50 seconds from beginning).
>
>> Interesting, I installed f-prot in vserver-host (also gentoo),
>> and it works there! So I think this problem must be somehow
>> related to vserver-guest (probably configuration). So what could
>> be reason for this problem? I think, f-prot downloads its updates
>> using ftp or http connection. Is there some vserver config-option
>> I must activate if I want f-prot allow to update?
>
> nope, networking happens on the Host, so basically
> your network failure must somehow be related to the
> host's network config ... and we definitely need
> more detail about the host/guest config to even start
> guessing ...
>
> things which come to my mind are:
>
> - nat/masquerading with limit/timeout
> - firewall/router issues
I do not have any nat/masquerading/firewall/proxy. Or better
said, I did absolutelly nothing concerning networking yet.
Guests have their own ip-addresses on the same lan-segment.
That's all. And my guests download large amount of data when
installing new software, without any problem...
I checked host-logs, but did not find anything. Actually,
there is nothing concerning vservers at all. Don't know,
where logs for vservers might be...
Jarry
-- _______________________________________________________________ This mailbox accepts e-mails only from selected mailing-lists! Everything else is considered to be spam and therefore deleted.Received on Sat May 23 10:23:15 2009