Herbert Poetzl wrote: > On Fri, May 22, 2009 at 07:46:47PM +0200, Jarry wrote: >> >> In one of my vserver-guests (gentoo) I installed f-prot, which >> I want to use for mail scanning. Problem is, I can not update >> virus signatures. Whenever I try it (/opt/f-prot/fpudate), >> I always get this error: >> >> --------------------------------------------- >> *** /var/log/messages (vserver guest) *** >> May 22 17:13:10 mail fpupdate: Debug: User agent "FPAV_Updater/6.0.2 >> (UNIX; Linux; 2.6.22-vs2.2.0.7-gentoo; ; x86_64)" >> May 22 17:13:10 mail fpupdate: Update server - Valid license-key >> May 22 17:13:10 mail fpupdate: Debug: Server >> srv3.directupdates.f-prot.net (weight 10) >> May 22 17:13:10 mail fpupdate: Debug: Server index 2 >> May 22 17:13:10 mail fpupdate: Debug: Using server >> srv3.directupdates.f-prot.net >> May 22 17:13:10 mail fpupdate: Attempting to retrieve the latest >> antivir.def update from update server >> May 22 17:13:10 mail fpupdate: Debug: User agent "FPAV_Updater/6.0.2 >> (UNIX; Linux; 2.6.22-vs2.2.0.7-gentoo; ; x86_64)" >> May 22 17:14:02 mail fpupdate: Warning: Network - Connection failed >> (23), trying again... >> May 22 17:14:08 mail fpupdate: Warning: Network - Connection failed >> (23), trying again... >> May 22 17:14:13 mail fpupdate: Warning: Network - Connection failed >> (23), trying again... >> May 22 17:14:18 mail fpupdate: Error: Incorrect checksum of downloaded >> update >> --------------------------------------------- > >> In console I can see update counter, and this problem happens >> always exactly at 43% (~50 seconds from beginning). > >> Interesting, I installed f-prot in vserver-host (also gentoo), >> and it works there! So I think this problem must be somehow >> related to vserver-guest (probably configuration). So what could >> be reason for this problem? I think, f-prot downloads its updates >> using ftp or http connection. Is there some vserver config-option >> I must activate if I want f-prot allow to update? > > nope, networking happens on the Host, so basically > your network failure must somehow be related to the > host's network config ... and we definitely need > more detail about the host/guest config to even start > guessing ... > > things which come to my mind are: > > - nat/masquerading with limit/timeout > - firewall/router issues I do not have any nat/masquerading/firewall/proxy. Or better said, I did absolutelly nothing concerning networking yet. Guests have their own ip-addresses on the same lan-segment. That's all. And my guests download large amount of data when installing new software, without any problem... I checked host-logs, but did not find anything. Actually, there is nothing concerning vservers at all. Don't know, where logs for vservers might be... Jarry -- _______________________________________________________________ This mailbox accepts e-mails only from selected mailing-lists! Everything else is considered to be spam and therefore deleted.