spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Matus UHLAR - fantomas <uh...@fantomas.sk>
Subject Re: repeated sa-update problems
Date Fri, 28 Sep 2018 08:39:50 GMT
>>On 9/20/2018 8:59 AM, Dave Jones wrote:
>>>I will have to check later if someone else can't check today.  I am at
>>>a customer location where I don't have good VPN connection out and
>>>will be traveling this evening.  I can check tomorrow if it can wait.
>
>On 20.09.18 09:05, Kevin A. McGrail wrote:
>>It can wait.  Matus also had the issue hitting my mirror and I know I
>>don't use a CDN.

On 20.09.18 16:05, Matus UHLAR - fantomas wrote:
>I looked at update times and they are different each day - debian script
>sleeps random number of seconds (up to one hour) in order to lower the
>impact at mirror servers.
>
>I have removed the "--fail" option from curl and will look at error message
>if there's any.
>
>I'll keep you updated and will fill bugreport if I'm able to find out
>anything useful.

the problem repeated today

Sep 28 07:43:07.888 [7018] dbg: http: /usr/bin/curl -s -L -O --remote-time -g --max-redirs
2 --connect-timeout 30 --max-time 300 -o 1842077.tar.gz -- http://sa-update.spamassassin.org/1842077.tar.gz
Sep 28 07:43:21.973 [7018] dbg: http: process [7019], exit status: 4608
Sep 28 07:43:21.973 [7018] dbg: channel: selected mirror http://sa-update.space-pro.be
Sep 28 07:43:21.974 [7018] dbg: http: url: http://sa-update.space-pro.be/1842077.tar.gz
Sep 28 07:43:21.974 [7018] dbg: http: downloading to: /var/lib/spamassassin/3.004000/updates_spamassassin_org/1842077.tar.gz,
update
Sep 28 07:43:21.974 [7018] dbg: util: executable for curl was found at /usr/bin/curl
Sep 28 07:43:21.974 [7018] dbg: http: /usr/bin/curl -s -L -O --remote-time -g --max-redirs
2 --connect-timeout 30 --max-time 300 -o 1842077.tar.gz -z 1842077.tar.gz -- http://sa-update.space-pro.be/1842077.tar.gz
Sep 28 07:43:22.304 [7018] dbg: http: process [7041], exit status: 0
Sep 28 07:43:22.305 [7018] dbg: http: url: http://sa-update.space-pro.be/1842077.tar.gz.sha1
Sep 28 07:43:22.305 [7018] dbg: http: downloading to: /var/lib/spamassassin/3.004000/updates_spamassassin_org/1842077.tar.gz.sha1,
new
Sep 28 07:43:22.305 [7018] dbg: util: executable for curl was found at /usr/bin/curl
Sep 28 07:43:22.305 [7018] dbg: http: /usr/bin/curl -s -L -O --remote-time -g --max-redirs
2 --connect-timeout 30 --max-time 300 -o 1842077.tar.gz.sha1 -- http://sa-update.space-pro.be/1842077.tar.gz.sha1
Sep 28 07:43:22.376 [7018] dbg: http: process [7043], exit status: 0
Sep 28 07:43:22.376 [7018] dbg: http: url: http://sa-update.space-pro.be/1842077.tar.gz.asc
Sep 28 07:43:22.377 [7018] dbg: http: downloading to: /var/lib/spamassassin/3.004000/updates_spamassassin_org/1842077.tar.gz.asc,
new
Sep 28 07:43:22.377 [7018] dbg: util: executable for curl was found at /usr/bin/curl
Sep 28 07:43:22.377 [7018] dbg: http: /usr/bin/curl -s -L -O --remote-time -g --max-redirs
2 --connect-timeout 30 --max-time 300 -o 1842077.tar.gz.asc -- http://sa-update.space-pro.be/1842077.tar.gz.asc
Sep 28 07:43:22.446 [7018] dbg: http: process [7045], exit status: 0
Sep 28 07:43:22.446 [7018] dbg: sha1: verification wanted: cb1b907b4f590fe24d0744cf60939685d51b3443
Sep 28 07:43:22.446 [7018] dbg: sha1: verification result: 953efe8f531a5a87f6d2d5a65b78b05e55599abc
channel: SHA1 verification failed, channel failed

# ls -lctr --full-time 1842077.*
-rw-r--r-- 1 debian-spamd debian-spamd   1 2018-09-28 07:43:21.967880543 +0200 1842077.tar.gz
-rw-r--r-- 1 debian-spamd debian-spamd 113 2018-09-28 07:43:22.371884772 +0200 1842077.tar.gz.sha1
-rw-r--r-- 1 debian-spamd debian-spamd 819 2018-09-28 07:43:22.443885519 +0200 1842077.tar.gz.asc

# hd 1842077.tar.gz
00000000  1f                                                |.|
00000001

Sep 28 07:43:23 fgt date=2018-09-28,time=07:43:23,devname=xx,devid=xy,logid=0000000013,type=traffic,subtype=forward,level=notice,vd=root,srcip=192.168.1.1,srcport=52411,srcintf="internal",dstip=176.28.55.20,dstport=80,dstintf="wan1",poluuid=9a0df156-900e-51e8-d4d5-7b4de8e07615,sessionid=87366444,proto=6,action=close,policyid=62,policytype=policy,dstcountry="France",srccountry="Reserved",trandisp=snat,transip=195.80.174.159,transport=52411,service="HTTP",duration=1,sentbyte=470,rcvdbyte=327,sentpkt=6,rcvdpkt=4,appcat="unscanned",wanin=111,wanout=150,lanin=150,lanout=111
Sep 28 07:43:23 fgt date=2018-09-28,time=07:43:23,devname=xx,devid=xy,logid=0000000013,type=traffic,subtype=forward,level=notice,vd=root,srcip=192.168.1.1,srcport=52412,srcintf="internal",dstip=176.28.55.20,dstport=80,dstintf="wan1",poluuid=9a0df156-900e-51e8-d4d5-7b4de8e07615,sessionid=87366446,proto=6,action=close,policyid=62,policytype=policy,dstcountry="France",srccountry="Reserved",trandisp=snat,transip=195.80.174.159,transport=52412,service="HTTP",duration=1,sentbyte=425,rcvdbyte=550,sentpkt=6,rcvdpkt=4,appcat="unscanned",wanin=334,wanout=105,lanin=105,lanout=334
Sep 28 07:43:23 fgt date=2018-09-28,time=07:43:23,devname=xx,devid=xy,logid=0000000013,type=traffic,subtype=forward,level=notice,vd=root,srcip=192.168.1.1,srcport=52413,srcintf="internal",dstip=176.28.55.20,dstport=80,dstintf="wan1",poluuid=9a0df156-900e-51e8-d4d5-7b4de8e07615,sessionid=87366448,proto=6,action=close,policyid=62,policytype=policy,dstcountry="France",srccountry="Reserved",trandisp=snat,transip=195.80.174.159,transport=52413,service="HTTP",duration=1,sentbyte=424,rcvdbyte=1272,sentpkt=6,rcvdpkt=4,appcat="unscanned",wanin=1056,wanout=104,lanin=104,lanout=1056

I can of course suspect our fgt firewall from having problems, but logs from
server would be great.

source IP: 195.80.174.159

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
You have the right to remain silent. Anything you say will be misquoted,
then used against you. 

Mime
View raw message