#3488: ClamAV not working on osgeo9-mail and is EOL
----------------------+---------------------------
Reporter: robe | Owner: sac-tickets@…
Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: SysAdmin | Keywords:
----------------------+---------------------------
The clamav-freshclam service on osgeo9-mail is not running
{{{
journalctl -u clamav-freshclam.service
}}}
shows this:
{{{
ec 15 09:23:08 mail freshclam[3943529]: Mon Dec 15 09:23:08 2025 -> ClamAV
update process started at Mon Dec 15 09:23:08 2025
Dec 15 09:23:08 mail freshclam[3943529]: Mon Dec 15 09:23:08 2025 -> ^Your
ClamAV installation is OUTDATED!
Dec 15 09:23:08 mail freshclam[3943529]: Mon Dec 15 09:23:08 2025 ->
^Local version: 0.103.9 Recommended version: 1.0.9
Dec 15 09:23:08 mail freshclam[3943529]: Mon Dec 15 09:23:08 2025 -> DON'T
PANIC! Read Installing - ClamAV Documentation
Dec 15 09:23:08 mail freshclam[3943529]: Mon Dec 15 09:23:08 2025 ->
^Cool-down expired, ok to try again.
Dec 15 09:23:08 mail freshclam[3943529]: Mon Dec 15 09:23:08 2025 -> daily
database available for update (local version: 27778, remote version:
27851)
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 ->
^downloadPatch: Can't download daily-27779.cdiff from
https://database.clamav.net/daily-27779.cdiff
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 ->
^Incremental update failed, trying to download daily.cvd
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 ->
^Can't download daily.cvd from https://database.clamav.net/daily.cvd
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 ->
^FreshClam received error code 403 from the ClamAV Content Delivery
Network (CDN).
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 -> This
could mean several things:
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 -> 1.
You are running an out-of-date version of ClamAV / FreshClam.
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 ->
Ensure you are the most updated version by visiting
ClamAVNet
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 -> 2.
Your network is explicitly denied by the FreshClam CDN.
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 ->
In order to rectify this please check that you are:
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 -> a.
Running an up-to-date version of FreshClam
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 -> b.
Running FreshClam no more than once an hour
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 -> c.
If you have checked (a) and (b), please open a ticket at
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 ->
GitHub · Where software is built
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 ->
and we will investigate why your network is blocked.
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 -> ^You
are on cool-down until after: 2025-12-16 09:23:09
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 ->
!Database update process failed: Forbidden; Blocked by CDN
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 ->
!Update failed.
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 ->
^FreshClam was forbidden from downloading a database.
Dec 15 09:23:09 mail freshclam[3943529]: Mon Dec 15 09:23:09 2025 -> ^This
is fatal. Retrying later won't help. Exiting now.
Dec 15 09:23:09 mail systemd[1]: clamav-freshclam.service: Main process
exited, code=exited, status=17/n/a
Dec 15 09:23:09 mail systemd[1]: clamav-freshclam.service: Failed with
result 'exit-code'.
}}}
Looking at that issue, I'm guessing it's because our clamav install is too
old and needs to be upgraded.
--
Ticket URL: <Making sure you're not a bot!;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.