Hi all,
I have a YANCUP (=Yet Another ClamWin Update Problem) with current version 0.96.2.1 on an XP professional machine.
My machine is behind a proxy, but ClamWin does not like any settings I provide to it!
I can directly access..
https://database.clamav.net/main.cvd
https://database.clamav.net/daily.cvd
..from InternetExplorr
without providing my credentials, so obviously, they are cached correctly and the network is up & running.
However, when I tell ClamWin to fetch the updates
without a proxy setting in its "proxy" settings options, I end up with a long list of
ClamAV update process started at Fri Aug 20 10:29:39 2010
main.cvd is up to date (version: 52, sigs: 704727, f-level: 44, builder: sven)
nonblock_connect: connect timing out (30 secs)
Can't connect to port 80 of host database.clamav.net (IP: 62.201.161.84)
Trying host database.clamav.net (91.198.238.33)...
nonblock_connect: connect timing out (30 secs)
Can't connect to port 80 of host database.clamav.net (IP: 91.198.238.33)
Trying host database.clamav.net (130.133.110.67)...
nonblock_connect: connect timing out (30 secs)
...
|
..before it is finally giving up.
If I
do provide proxy settings to ClamWin (=the same ones which are used in IE), ClamWin fails with different error messages:
ClamAV update process started at Fri Aug 20 10:40:07 2010
Connecting via my.proxy.mycompany.org
main.cvd is up to date (version: 52, sigs: 704727, f-level: 44, builder: sven)
Connecting via my.proxy.mycompany.org
WARNING: getfile: Unknown response from remote server (IP: 139.16.13.210)
WARNING: getpatch: Can't download daily-11596.cdiff from database.clamav.net
WARNING: getfile: Unknown response from remote server (IP: 139.16.13.210)
WARNING: getpatch: Can't download daily-11596.cdiff from database.clamav.net
WARNING: getfile: Unknown response from remote server (IP: 139.16.13.210)
WARNING: getpatch: Can't download daily-11596.cdiff from database.clamav.net
WARNING: getfile: Unknown response from remote server (IP: 139.16.13.210)
WARNING: Can't download daily.cvd from database.clamav.net
Trying again in 5 secs...
...
|
(proxy-name changed for data security reasons here)
So I gave it a 2nd try, this time with cURL.exe , trying to fetch the files outside of ClamWin:
curl --proxy1.0 my.proxy.mycompany.org:85 --proxy-ntlm -u : http://database.clamav.net/daily.cvd -o "daily.cvd" |
What I receive back this way is a HTML file, depicting an error in authentication:
Technical Information (for support personnel)
Error Code: 407 Proxy Authentication Required. The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. (12209)
IP Address: 139.16.13.210
Date: 20.08.2010 08:12:41 [GMT]
Server: ZRHA912X.ww002.mycompany.org
Source: proxy |
Note that the (non-working) curl command tries exactly to mimicry the (working!) IE call: Fetch the URL, use a proxy and authenticate by NTLM credentials.
(I also played a bit around with some of the other proxy-options, but to non avail)
So I suspect that ClamWin and cURL have the same proxy problems!
I also guess that a solution for cURL would hint where the ClamWin updates go wrong; scanning the forum, I see that a lot of people seem to have similar problems with CW updates...
So: If anyone ever succeeded in fetching the updates by cURL from behind a proxy or a CW developer could tell me how the proxy functionality in CW works, I'd glad to know!
Thanks!