Subject: Re: [vserver] F-Prot update: Network - Connection failed (23)
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Fri, 22 May 2009 23:47:20 +0200

On Fri, May 22, 2009 at 07:46:47PM +0200, Jarry wrote:
> Hi,
> 
> In one of my vserver-guests (gentoo) I installed f-prot, which
> I want to use for mail scanning. Problem is, I can not update
> virus signatures. Whenever I try it (/opt/f-prot/fpudate),
> I always get this error:
> 
> ---------------------------------------------
> *** /var/log/messages (vserver guest) ***
> May 22 17:13:10 mail fpupdate: Debug: User agent "FPAV_Updater/6.0.2 
> (UNIX; Linux; 2.6.22-vs2.2.0.7-gentoo; ; x86_64)"
> May 22 17:13:10 mail fpupdate: Update server - Valid license-key
> May 22 17:13:10 mail fpupdate: Debug: Server 
> srv3.directupdates.f-prot.net (weight 10)
> May 22 17:13:10 mail fpupdate: Debug: Server index 2
> May 22 17:13:10 mail fpupdate: Debug: Using server 
> srv3.directupdates.f-prot.net
> May 22 17:13:10 mail fpupdate: Attempting to retrieve the latest 
> antivir.def update from update server
> May 22 17:13:10 mail fpupdate: Debug: User agent "FPAV_Updater/6.0.2 
> (UNIX; Linux; 2.6.22-vs2.2.0.7-gentoo; ; x86_64)"
> May 22 17:14:02 mail fpupdate: Warning: Network - Connection failed 
> (23), trying again...
> May 22 17:14:08 mail fpupdate: Warning: Network - Connection failed 
> (23), trying again...
> May 22 17:14:13 mail fpupdate: Warning: Network - Connection failed 
> (23), trying again...
> May 22 17:14:18 mail fpupdate: Error: Incorrect checksum of downloaded 
> update
> ---------------------------------------------

> In console I can see update counter, and this problem happens
> always exactly at 43% (~50 seconds from beginning).

> Interesting, I installed f-prot in vserver-host (also gentoo),
> and it works there! So I think this problem must be somehow
> related to vserver-guest (probably configuration). So what could
> be reason for this problem? I think, f-prot downloads its updates
> using ftp or http connection. Is there some vserver config-option
> I must activate if I want f-prot allow to update?

nope, networking happens on the Host, so basically
your network failure must somehow be related to the
host's network config ... and we definitely need
more detail about the host/guest config to even start
guessing ...

things which come to my mind are:
 
 - nat/masquerading with limit/timeout
 - firewall/router issues

best,
Herbert

> Jarry
> 
> -- 
> _______________________________________________________________
> This mailbox accepts e-mails only from selected mailing-lists!
> Everything else is considered to be spam and therefore deleted.