From: "Massimo S." Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTP id 11560057 for ecs-isp@2rosenthals.com; Tue, 24 Dec 2024 04:40:50 -0500 Received: from secmgr-va.2rosenthals.com ([50.73.8.217]:48589 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.97.1) (envelope-from ) id 1tQ1P6-000000007dy-1RgF for ecs-isp@2rosenthals.com; Tue, 24 Dec 2024 04:40:41 -0500 Received: from mail2.quasarbbs.net ([80.86.52.115]:10017) by mail2.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1tQ1P0-000000007zY-20VQ for ecs-isp@2rosenthals.com; Tue, 24 Dec 2024 04:40:35 -0500 X-SASI-Hits: BODY_SIZE_3000_3999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_8BIT 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, LEGITIMATE_SIGNS 0.000000, MSGID_SAMEAS_FROM_HEX_844412 0.100000, MSG_THREAD 0.000000, REFERENCES 0.000000, REPLYTO_SAMEAS_FROM 0.000000, SENDER_NO_AUTH 0.000000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, USER_AGENT 0.000000, __ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_URGENCY 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_REPLYTO 0.000000, __HEADER_ORDER_FROM 0.000000, __HTTPS_URI 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __MULTIPLE_URI_TEXT 0.000000, __NO_HTML_TAG_RAW 0.000000, __PHISH_PHRASE11 0.000000, __REFERENCES 0.000000, __REPLYTO_SAMEAS_FROM_ACC 0.000000, __REPLYTO_SAMEAS_FROM_ADDY 0.000000, __REPLYTO_SAMEAS_FROM_DOMAIN 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __URI_WITH_PATH 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2024.12.24.91246 X-SASI-Hits: BODY_SIZE_3000_3999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_8BIT 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, LEGITIMATE_SIGNS 0.000000, MSGID_SAMEAS_FROM_HEX_844412 0.100000, MSG_THREAD 0.000000, REFERENCES 0.000000, REPLYTO_SAMEAS_FROM 0.000000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, USER_AGENT 0.000000, __ANY_URI 0.000000, __AUTH_RES_PASS 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_URGENCY 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_REPLYTO 0.000000, __HEADER_ORDER_FROM 0.000000, __HTTPS_URI 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __MULTIPLE_URI_TEXT 0.000000, __NO_HTML_TAG_RAW 0.000000, __PHISH_PHRASE11 0.000000, __REFERENCES 0.000000, __REPLYTO_SAMEAS_FROM_ACC 0.000000, __REPLYTO_SAMEAS_FROM_ADDY 0.000000, __REPLYTO_SAMEAS_FROM_DOMAIN 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __URI_WITH_PATH 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2024.12.24.91246 Received: from [192.168.10.199] (dtp [192.168.10.199]) by srv2 (Weasel v2.9-0001 ) for ; Tue, 24 Dec 2024 10:40:32 -0000 Reply-To: ml@ecomstation.it Subject: Re: [eCS-ISP] (clamav) freshclam and cron/2 To: eCS ISP Mailing List References: Organization: Massimo S. Message-ID: Date: Tue, 24 Dec 2024 10:40:31 +0100 User-Agent: Mozilla/5.0 (OS/2; U; Warp 4.5; it-IT; rv:1.7.13) Gecko/20060424 Thunderbird/1.0.8 Mnenhy/0.7.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=iso-8859-15; format=flowed Content-Language: it-IT Content-Transfer-Encoding: 8bit Il 24/12/2024 09:38, Massimo S. ha scritto: > > > Il 09/12/2024 09:58, Massimo S. ha scritto: >> Il 03/12/2024 05:52, Steven Levine ha scritto: >>> In , on 12/01/24 >>>     at 02:20 PM, "Massimo S." said: >>> >>> Hi Massimo, >>> >>>> [LibClamAV] cli_rmdirs: Can't locate >>>> X:/usr/local/clamav/share/clamav/tmp.ae3648a996: No such file or >>>> directory >>> >>> It's probably a porting error.  As long as freshclam finishes without >>> errors, the error can be ignored. >>> >>> For the layman, this message is saying the directory cannot be deleted >>> because it does not exist. >>> >>>> on one MTA id updates correctly the signatures, on the other it fails >>>> this maybe is due to some other reasons >>> >>> This is probably true. >>> >>> Steven >> >> hi, >> >> after further investigation i've found that if i run manually >> (directly from the command prompt) >> the script that update signatures (clamav + sane security) >> they both updates correctly >> >> while when the script is being started by cron schedules >> it updates sane security signatures (that are simple rsync) >> but do not update clamav ones (freshclam) >> >> so, what are the differences from MTA1 VM to MTA2 VM? >> >> on MTA1 VM i use rexx cron "cronrgf.cmd" 2.0.3 (by R. G. Flatscher) >> >> https://hobbesarchive.com/Home/Download?path=/Hobbes/pub/os2/util/schedule/CronRGF_2-0-3.zip >> >> cron entry:  0 2 * * * x:\usr\local\clamav\bin\myscript.cmd >> >> on MTA2 VM i use C R O N / 2 by Bob Hood and modified by Yuri Dario in 2019 >> i'm not able to find the file online (i've verified Netlabs repository, hobbesarchive ecsoft2 etc.) >> >> cron2-1_4_2-1_oc00.zip >> >> cron entry:   0 22 * * * OS2 FG WIND- x:\usr\local\clamav\bin\myscript.cmd >> >> >> any suggestion? >> thanks >> >> massimo > > Hi Steven and Yuri, > > any help with this? > > please > > massimo after activating verbose log i found this error: * Trying 104.16.218.84:443... * Connected to database.clamav.net (104.16.218.84) port 443 (#0) * ALPN, offering http/1.1 * error setting certificate verify locations: CAfile: /@unixroot/etc/pki/tls/certs/ca-bundle.crt CApath: none * Closing connection 0 Tue Dec 24 10:30:12 2024 -> !Download failed (77) Tue Dec 24 10:30:12 2024 -> ! Message: Problem with the SSL CA cert (path? access rights?) Tue Dec 24 10:30:12 2024 -> !Can't download daily.cvd from https://database.clamav.net/daily.cvd Tue Dec 24 10:30:12 2024 -> Giving up on https://database.clamav.net... Tue Dec 24 10:30:12 2024 -> !Update failed for database: daily Tue Dec 24 10:30:12 2024 -> !Database update process failed: Connection failed Tue Dec 24 10:30:12 2024 -> !Update failed. Tue Dec 24 10:30:12 2024 -> ~[LibClamAV] cli_rmdirs: Can't locate d:/usr/local/clamav/share/clamav/tmp.add81be443: No such file or directory the content of /@unixroot/etc/pki/tls/certs is this one: 15/11/11 18:05 662.586 0 a--- ca-bundle.crt 15/11/11 18:05 743.949 0 a--- ca-bundle.trust.crt massimo