[Pkg-clamav-devel] Bug#743305: Acknowledgement (clamav-freshclam: Stops downloading updates (daily.cvd) from local mirror)

[Simon Hobson]

I'll need to leave it for a little while to see that it's all fine, but adding PrivateMirror seems to fix it. It wasn't in the config file - so the disabled value has to be the default that's being reported.
Had a look in the changelog - found it at line 962 so it's no wonder I'd not noticed it's silent arrival.

As to how I made it work, I just shared /var/lib/clamav on my 'master' server with an Apache vhost (I already have Apache running for other stuff), and set "DatabaseMirror virusdb.<mydomain>" in freshclam.conf on the other servers. I don't know where it came from, but I recall (some time ago now) finding something about how to set it up this way. It may not have been this site I was referring to back then, but it's certainly Option 2 I did :
https://github.com/vrtadmin/clamav-faq/blob/master/mirrors/CvdPrivateMirror.md

The same test is referenced here :
http://osdir.com/ml/clamav-users/2012-07/msg00030.html

> This solution is really simple to implement but it's only effective
> if your clients are all on the same local network and bandwidth is
> not an issue for you.

> Configure a local webserver on one of your machines (say machine1.mylan) and
> let freshclam download the *.cvd files fromhttp://database.clamav.net to
> the webserver’s DocumentRoot.

> Add the following line to freshclam.conf on machine1.mylan.

> ScriptedUpdates no
> First the database will be downloaded to the local webserver and then
> the other clients on the network will update their copy of the database
> from it. For this to work you have to change freshclam.conf on each client
> so that it reads.

> DatabaseMirror machine1.mylan
> ScriptedUpdates no



Over on the ClamAV-users mailing list, Shawn Webb suggested that the issue is to do with some new code intended to make downloads more robust :
http://lurker.clamav.net/message/20140401.183417.1930bc2b.en.html
I'm not really in a position to test the patch.