Subject: Re: [vserver] F-Prot update: Network - Connection failed (23)
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Sat, 23 May 2009 13:37:01 +0200

On Sat, May 23, 2009 at 10:55:32AM +0200, Jarry wrote:
> Herbert Poetzl wrote:
> >On Fri, May 22, 2009 at 07:46:47PM +0200, Jarry wrote:
> >>
> >>In one of my vserver-guests (gentoo) I installed f-prot, which
> >>I want to use for mail scanning. Problem is, I can not update
> >>virus signatures. Whenever I try it (/opt/f-prot/fpudate),
> >>I always get this error:
> >>
> >>---------------------------------------------
> >>*** /var/log/messages (vserver guest) ***
> >>May 22 17:13:10 mail fpupdate: Debug: User agent "FPAV_Updater/6.0.2 
> >>(UNIX; Linux; 2.6.22-vs2.2.0.7-gentoo; ; x86_64)"
> >>May 22 17:13:10 mail fpupdate: Update server - Valid license-key
> >>May 22 17:13:10 mail fpupdate: Debug: Server 
> >>srv3.directupdates.f-prot.net (weight 10)
> >>May 22 17:13:10 mail fpupdate: Debug: Server index 2
> >>May 22 17:13:10 mail fpupdate: Debug: Using server 
> >>srv3.directupdates.f-prot.net
> >>May 22 17:13:10 mail fpupdate: Attempting to retrieve the latest 
> >>antivir.def update from update server
> >>May 22 17:13:10 mail fpupdate: Debug: User agent "FPAV_Updater/6.0.2 
> >>(UNIX; Linux; 2.6.22-vs2.2.0.7-gentoo; ; x86_64)"
> >>May 22 17:14:02 mail fpupdate: Warning: Network - Connection failed 
> >>(23), trying again...
> >>May 22 17:14:08 mail fpupdate: Warning: Network - Connection failed 
> >>(23), trying again...
> >>May 22 17:14:13 mail fpupdate: Warning: Network - Connection failed 
> >>(23), trying again...
> >>May 22 17:14:18 mail fpupdate: Error: Incorrect checksum of downloaded 
> >>update
> >>---------------------------------------------
> >
> >>In console I can see update counter, and this problem happens
> >>always exactly at 43% (~50 seconds from beginning).
> >
> >>Interesting, I installed f-prot in vserver-host (also gentoo),
> >>and it works there! So I think this problem must be somehow
> >>related to vserver-guest (probably configuration). So what could
> >>be reason for this problem? I think, f-prot downloads its updates
> >>using ftp or http connection. Is there some vserver config-option
> >>I must activate if I want f-prot allow to update?
> >
> >nope, networking happens on the Host, so basically
> >your network failure must somehow be related to the
> >host's network config ... and we definitely need
> >more detail about the host/guest config to even start
> >guessing ...
> >
> >things which come to my mind are:
> > 
> > - nat/masquerading with limit/timeout
> > - firewall/router issues
> 
> I do not have any nat/masquerading/firewall/proxy. Or better
> said, I did absolutelly nothing concerning networking yet.
> Guests have their own ip-addresses on the same lan-segment.
> That's all. 

> And my guests download large amount of data when
> installing new software, without any problem...

> I checked host-logs, but did not find anything. Actually,
> there is nothing concerning vservers at all. 

google suggests: https://forum.f-prot.com/index.php?topic=1455.0

so maybe enable the debugging for your software, and
see what it logs then .. maybe we get some clues what
is misconfigured on your (guest) system

> Don't know, where logs for vservers might be...

the guest logs are _inside_ the guest (assuming that you
have enabled syslog or similar)

best,
Herbert

> Jarry
> 
> -- 
> _______________________________________________________________
> This mailbox accepts e-mails only from selected mailing-lists!
> Everything else is considered to be spam and therefore deleted.