ISPConfig on Debian 10 Crashes

Discussion in 'Installation/Configuration' started by Martin Roman, Jun 23, 2020.

  1. Martin Roman

    Martin Roman New Member

    Hello,
    To install ISPConfig I use the script of Matteo Temporini https://www.howtoforge.com/tutorial/ispconfig-automated-install-script/.
    First, I follow the tutorial https://www.howtoforge.com/tutorial/debian-minimal-server/ and then I run the script developed by Matteo Temporini.
    I have more than 10 servers installed with above steps (all running fine) however when I installed my latest ISPConfig deployment (Debian 10, 2vCPU, 4GB RAM, 40GB storage) the server started crashing, Website (Wordpress based) and email were running fine, it seems that everything was running fine but the server crashed everyday at the same time.

    Any assistance or advice to fix this issue would be appreciated.

    Best regards,
    Martin
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    First, it is quite unlikely that ISPConfig is crashing or causing this as it's not a service, so it can't crash. May you please describe what you mean with crashing, what exactly happens and which exact services become unavailable.
     
  3. Martin Roman

    Martin Roman New Member

    Hi Till,

    Thank you for your post.
    Sorry for the misunderstanding in the title of the post, the correct title would be:
    "ISPConfig server based in Debian 10 Crashes"
    It happened a few minutes ago, the website (Wordpress based) and ISPConfig control panel down. SSH service also down (I could not connect to the server by SSH). So I logged into server control panel a performed a reboot or powercycle.

    The website has low traffic, there are 15 email accounts, most email communication is handled by email clients like Thunderbird, Outlook and webmail.

    Any assistance or advice to fix this issue would be appreciated.

    Kind regards,

    Martin
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Check the /var/log/syslog file to find out what happened before your reboot. Maybe some services ran out of memory or there was a kernel panic or something like that.
     
  5. Jesse Norell

    Jesse Norell ISPConfig Developer Staff Member ISPConfig Developer

    Also if/when it happens again, see if your server control panel has a console you can check for errors prior to restarting.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    There is another possibility, maybe nothing crashed, you got just banned by fail2ban. So check fail2ban log file as well.
     
  7. Martin Roman

    Martin Roman New Member

    Hello Till, Jesse,
    Thank you for your posts.
    Enclosed syslog entries just before the latest crash (today) and up to the server started to process email messages.

    Any feedback or advise would be appreciated.
    Kind regards,
    Martin
     

    Attached Files:

  8. Martin Roman

    Martin Roman New Member

    Hello,
    Please find fail2ban log.
    As you can see in the log, fail2ban started after my reboot at 09:06:12.

    Any feedback or advise to fix this issue will be appreciated.

    Regards,
    Martin
     

    Attached Files:

  9. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Was your workstation IP among the banned?
     
  10. Martin Roman

    Martin Roman New Member

    Hello Taleman,
    Thank you for your post.
    The IP of my workstation was not banned. If you check country of origin of banned IP, most are from China and Russia (maybe spammers, bots, etc.).
    Today, I have been checking the web page every five minutes from my phone or desktop. As soon as I checked that the website were not available I tried to log by SSH but SSH was also down, I logged into server panel and rebooted the instance.

    Regards,
    Martin
     
  11. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Looks like your host is a virtual host. Did you check the logs on the real host from the time you could not access your host?
    If you can log in from the console of your host, you can see what is going on when SSH is not working.
    Do any of the log files, either from virtual host or the real host, show anyting at the time when connections are down?
     
  12. Steini86

    Steini86 Active Member

    Do you have a few more lines before that? It looks like your servers network card goes down. Do you have a virtual console for your vserver? Should be in your vserver config panel.
    Your server looses network connection ~8:50 and gets a hard reset on 9:05. So it is not really crashed.
    Do you use DHCP or have a static IP configured?
     
  13. Martin Roman

    Martin Roman New Member

    Hello,
    Thank you for your posts.
    Please find a few lines before network card goes down as requested by Steini86 :
    (server name or domain has been edited).
    =================
    Jun 23 08:50:01 mail CRON[12361]: (getmail) CMD (/usr/local/bin/run-getmail.sh > /dev/null 2>> /dev/null)
    Jun 23 08:50:01 mail CRON[12362]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Jun 23 08:50:01 mail CRON[12364]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Jun 23 08:50:02 mail pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
    Jun 23 08:50:02 mail pure-ftpd: ([email protected]) [INFO] Logout.
    Jun 23 08:50:02 mail postfix/smtpd[8714]: connect from localhost[127.0.0.1]
    Jun 23 08:50:02 mail postfix/smtpd[8714]: lost connection after CONNECT from localhost[127.0.0.1]
    Jun 23 08:50:02 mail postfix/smtpd[8714]: disconnect from localhost[127.0.0.1] commands=0/0
    Jun 23 08:50:02 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=</C7SosCoxpR/AAAB>
    Jun 23 08:50:02 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<lS7SosCozpJ/AAAB>
    Jun 23 08:50:03 mail postfix/smtpd[10631]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 23 08:50:03 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12428, session=<WBngosCohty1QCM6>
    Jun 23 08:50:03 mail postfix/smtpd[10631]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jun 23 08:50:03 mail postfix/submission/smtpd[12057]: connect from unknown[156.96.118.57]
    Jun 23 08:50:04 mail postfix/submission/smtpd[12057]: disconnect from unknown[156.96.118.57] ehlo=1 auth=0/1 quit=1 commands=2/3
    Jun 23 08:50:04 mail dovecot: pop3([email protected])<12428><WBngosCohty1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/272, size=146005961
    Jun 23 08:50:05 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12434, session=<X/P9osCoh9y1QCM6>
    Jun 23 08:50:06 mail dovecot: pop3([email protected])<12434><X/P9osCoh9y1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/124, size=63220258
    Jun 23 08:50:06 mail postfix/smtpd[10965]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 23 08:50:06 mail postfix/smtpd[10965]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jun 23 08:50:07 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12436, session=<lMYZo8Coidy1QCM6>
    Jun 23 08:50:07 mail dovecot: pop3([email protected])<12436><lMYZo8Coidy1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/53, size=38291417
    Jun 23 08:50:12 mail postfix/smtpd[8714]: connect from unknown[185.143.72.16]
    Jun 23 08:50:14 mail postfix/smtpd[8707]: connect from unknown[185.143.75.153]
    Jun 23 08:50:16 mail postfix/smtpd[9907]: connect from unknown[185.143.72.34]
    Jun 23 08:50:19 mail postfix/smtpd[8714]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 23 08:50:20 mail postfix/smtpd[8714]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jun 23 08:50:21 mail postfix/smtpd[8707]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 23 08:50:21 mail postfix/smtpd[8707]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jun 23 08:50:24 mail postfix/smtpd[9907]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 23 08:50:24 mail postfix/smtpd[9907]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jun 23 08:50:28 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12442, session=<5p9ZpMCoQPK1QCM6>
    Jun 23 08:50:28 mail dovecot: pop3([email protected]om)<12442><5p9ZpMCoQPK1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0
    Jun 23 08:50:30 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=179.6.192.19, lip=88.198.90.244, mpid=12444, session=<Sgh4pMCojNOzBsAT>
    Jun 23 08:50:30 mail dovecot: pop3([email protected])<12444><Sgh4pMCojNOzBsAT>: Disconnected: Logged out top=0/0, retr=0/0, del=0/67, size=21000292
    Jun 23 08:50:35 mail postfix/smtpd[10965]: connect from mx16[216.244.165.228]
    Jun 23 08:50:37 mail postfix/smtpd[10965]: NOQUEUE: reject: RCPT from mx16 [216.244.165.228]: 450 4.7.1 <bcpmx4>: Helo command rejected: Host not found; from=<> to=<[email protected]> proto=ESMTP helo=<>
    Jun 23 08:50:37 mail postfix/smtpd[10965]: disconnect from mx16.bcp.com.pe[216.244.165.228] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
    Jun 23 08:50:41 mail postfix/smtpd[10631]: connect from unknown[185.143.75.81]
    Jun 23 08:50:42 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12447, session=<ubA3pcCotOO1QCM6>
    Jun 23 08:50:43 mail dovecot: pop3([email protected])<12447><ubA3pcCotOO1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/272, size=146005961
    Jun 23 08:50:45 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12449, session=<thFcpcCoteO1QCM6>
    Jun 23 08:50:45 mail dovecot: pop3([email protected])<12449><thFcpcCoteO1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/126, size=80673490
    Jun 23 08:50:48 mail postfix/smtpd[8714]: connect from unknown[185.143.72.25]
    Jun 23 08:50:49 mail postfix/smtpd[10631]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 23 08:50:49 mail postfix/smtpd[10631]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jun 23 08:50:56 mail postfix/smtpd[8714]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 23 08:50:57 mail postfix/smtpd[8714]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jun 23 08:50:58 mail named[633]: no longer listening on 88.198.90.244#53
    ======================
    On the other side I visited: https://www.faqforge.com/linux/debugging-ispconfig-3-server-actions-in-case-of-a-failure/ and enabled the debug Loglevel in ISPConfig
    When I run: /usr/local/ispconfig/server/server.sh
    I get:
    23.06.2020-23:47 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
    23.06.2020-23:47 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    ========================
    Finally, regarding Taleman post; I logged into my virtual host panel and there are no logs of the real host (it seems that this function is not enabled in Hetzner) .

    Additionally, the server has a static IP address.

    Any feedback will be appreciated.

    Martin
     
  14. Martin Roman

    Martin Roman New Member

    Hello,
    I forgot to mention that are a few messages in the inbox of root user (cat /var/spool/mail/root):
    =================
    From [email protected] Tue Jun 16 16:43:58 2020
    Return-Path: <[email protected]>
    X-Original-To: [email protected]
    Delivered-To: [email protected]
    Received: from localhost (localhost [127.0.0.1])
    by mail.mydomain.com (Postfix) with ESMTP id 60FB261831
    for <[email protected]>; Tue, 16 Jun 2020 16:43:58 -0500 (-05)
    X-Virus-Scanned: Debian amavisd-new at mail.mydomain.com
    Received: from mail.mydomain.com ([127.0.0.1])
    by localhost (mail.mydomain.com [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id yxBL3sQ8Qed2 for <[email protected]>;
    Tue, 16 Jun 2020 16:43:33 -0500 (-05)
    Received: by mail.mydomain.com (Postfix, from userid 0)
    id 7AA3561848; Tue, 16 Jun 2020 16:26:09 -0500 (-05)
    From: [email protected] (Cron Daemon)
    To: [email protected]
    Subject: ***UNCHECKED*** Cron <[email protected]>
    /usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo
    `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done
    MIME-Version: 1.0
    Content-Type: text/plain; charset=UTF-8
    Content-Transfer-Encoding: 8bit
    X-Cron-Env: <SHELL=/bin/sh>
    X-Cron-Env: <HOME=/root>
    X-Cron-Env: <PATH=/usr/bin:/bin>
    X-Cron-Env: <LOGNAME=root>
    Message-Id: <[email protected]>
    Date: Tue, 16 Jun 2020 16:26:09 -0500 (-05)

    /bin/sh: fork: cannot allocate memory
    ================
    but this messages are until June 16.

    Regards
    Martin
     
  15. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    What is the situation with memory now?
    Code:
    free -h
    
    df -hT
     
  16. Martin Roman

    Martin Roman New Member

    Hello,
    Here the information requested:
    [email protected]:~# free -h
    total used free shared buff/cache available
    Mem: 3,8Gi 1,6Gi 204Mi 103Mi 1,9Gi 1,8Gi
    Swap: 0B 0B 0B
    [email protected]:~# df -hT
    S.ficheros Tipo TamaƱo Usados Disp Uso% Montado en
    udev devtmpfs 1,9G 0 1,9G 0% /dev
    tmpfs tmpfs 386M 40M 347M 11% /run
    /dev/sda1 ext4 19G 12G 6,3G 65% /
    tmpfs tmpfs 1,9G 0 1,9G 0% /dev/shm
    tmpfs tmpfs 5,0M 0 5,0M 0% /run/lock
    tmpfs tmpfs 1,9G 0 1,9G 0% /sys/fs/cgroup
    /dev/sda15 vfat 121M 130K 120M 1% /boot/efi
    tmpfs tmpfs 386M 0 386M 0% /run/user/0
    [email protected]:~#
    ===========
    Regards,
    Martin
     
  17. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    That host has no swap, so if memory is exhausted it starts killing processes. If you know 4 GB RAM is enough always, you can run without swap.
     
  18. nhybgtvfr

    nhybgtvfr Active Member

    are you able to increase the memory on that host? even for just 24 - 48 hours?
    if so, you could try doubling the memory, which may be enough to avoid the loss of connectivity and forced rebooting.
    also you could try installing munin, with the multips_memory plugin. and configure that plugin to monitor the obvious suspect packages, apache, amavis, postfix, mysql, php etc.
    i know you can't sit there watching the server, waiting for the problem to appear, this will give you a load of graphs of each processes memory usage over time. which you'll still be able to reload and view after a crash/reboot.
    won't directly fix your issue, but will at least allow you to identify exactly which process is causing you to run out of memory in the first place, and problems are easier to fix when you know exactly where to look for them.
    and the worst case scenario is that it eliminates lack of memory as a cause of your problems.

    once you've identified the problem, you'll want to avoid monitoring too much stuff with munin, especially long term, munin logs can really eat up your disk space.
     
  19. Martin Roman

    Martin Roman New Member

    Hello,
    Thank you for your posts.
    The server failed again at 09.06 today.
    Below syslog entries when the server failed:
    ===================
    Jun 24 09:06:12 mail named[636]: no longer listening on 88.198.90.244#53
    Jun 24 09:06:12 mail postfix/smtpd[17915]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 24 09:06:13 mail postfix/smtpd[17275]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 24 09:06:13 mail ntpd[611]: Deleting interface #3 eth0, 88.198.90.244#123, interface stats: received=1045, sent=1014, dropped=0, active_time=86402 secs
    Jun 24 09:06:13 mail ntpd[611]: 162.159.200.123 local addr 88.198.90.244 -> <null>
    Jun 24 09:06:13 mail ntpd[611]: 176.96.138.245 local addr 88.198.90.244 -> <null>
    Jun 24 09:06:13 mail ntpd[611]: 173.212.196.208 local addr 88.198.90.244 -> <null>
    Jun 24 09:06:13 mail ntpd[611]: 85.93.216.115 local addr 88.198.90.244 -> <null>
    Jun 24 09:06:13 mail ntpd[611]: 213.239.239.166 local addr 88.198.90.244 -> <null>
    Jun 24 09:06:13 mail ntpd[611]: 131.188.3.223 local addr 88.198.90.244 -> <null>
    Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> Received signal: wake up
    Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> ClamAV update process started at Wed Jun 24 09:06:29 2020
    Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> ^Can't query current.cvd.clamav.net
    Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> ^Invalid DNS reply. Falling back to HTTP mode.
    Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:29 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:29 2020 -> ^ Message: Couldn't resolve host name
    Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
    Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
    Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> Trying again in 5 secs...
    Jun 24 09:06:34 mail freshclam[580]: Wed Jun 24 09:06:34 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:34 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:34 2020 -> ^ Message: Couldn't resolve host name
    Jun 24 09:06:34 mail freshclam[580]: Wed Jun 24 09:06:34 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
    Jun 24 09:06:34 mail freshclam[580]: Wed Jun 24 09:06:34 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
    Jun 24 09:06:34 mail freshclam[580]: Wed Jun 24 09:06:34 2020 -> Trying again in 5 secs...
    Jun 24 09:06:39 mail freshclam[580]: Wed Jun 24 09:06:39 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:39 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:39 2020 -> ^ Message: Couldn't resolve host name
    Jun 24 09:06:39 mail freshclam[580]: Wed Jun 24 09:06:39 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
    Jun 24 09:06:39 mail freshclam[580]: Wed Jun 24 09:06:39 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
    Jun 24 09:06:39 mail freshclam[580]: Wed Jun 24 09:06:39 2020 -> Trying again in 5 secs...
    Jun 24 09:06:44 mail freshclam[580]: Wed Jun 24 09:06:44 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:44 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:44 2020 -> ^ Message: Couldn't resolve host name
    Jun 24 09:06:44 mail freshclam[580]: Wed Jun 24 09:06:44 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
    Jun 24 09:06:44 mail freshclam[580]: Wed Jun 24 09:06:44 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
    Jun 24 09:06:44 mail freshclam[580]: Wed Jun 24 09:06:44 2020 -> Trying again in 5 secs...
    Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:49 2020 -> !remote_cvdhead: Download failed (6) Wed Jun 24 09:06:49 2020 -> ! Message: Couldn't resolve host name
    Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
    Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
    Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> Giving up on https://database.clamav.net...
    Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:49 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:49 2020 -> ^ Message: Couldn't resolve host name
    Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
    Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
    Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> Trying again in 5 secs...
    Jun 24 09:06:54 mail freshclam[580]: Wed Jun 24 09:06:54 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:54 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:54 2020 -> ^ Message: Couldn't resolve host name
    Jun 24 09:06:54 mail freshclam[580]: Wed Jun 24 09:06:54 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
    Jun 24 09:06:54 mail freshclam[580]: Wed Jun 24 09:06:54 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
    Jun 24 09:06:54 mail freshclam[580]: Wed Jun 24 09:06:54 2020 -> Trying again in 5 secs...
    Jun 24 09:06:59 mail freshclam[580]: Wed Jun 24 09:06:59 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:59 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:59 2020 -> ^ Message: Couldn't resolve host name
    Jun 24 09:06:59 mail freshclam[580]: Wed Jun 24 09:06:59 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
    Jun 24 09:06:59 mail freshclam[580]: Wed Jun 24 09:06:59 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
    Jun 24 09:06:59 mail freshclam[580]: Wed Jun 24 09:06:59 2020 -> Trying again in 5 secs...
    Jun 24 09:07:01 mail CRON[20860]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Jun 24 09:07:01 mail CRON[20861]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Jun 24 09:07:04 mail freshclam[580]: Wed Jun 24 09:07:04 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:07:04 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:07:04 2020 -> ^ Message: Couldn't resolve host name
    Jun 24 09:07:04 mail freshclam[580]: Wed Jun 24 09:07:04 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
    Jun 24 09:07:04 mail freshclam[580]: Wed Jun 24 09:07:04 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
    Jun 24 09:07:04 mail freshclam[580]: Wed Jun 24 09:07:04 2020 -> Trying again in 5 secs...
    Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:07:09 2020 -> !remote_cvdhead: Download failed (6) Wed Jun 24 09:07:09 2020 -> ! Message: Couldn't resolve host name
    Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
    Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
    Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> Giving up on https://database.clamav.net...
    Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> !Update failed for database: daily
    Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> ^fc_update_databases: fc_update_database failed: HTTP GET failed (11)
    Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> !Database update process failed: HTTP GET failed (11)
    Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> !Update failed.
    ================
    Before the first entry listed above, there are normal pop3 entries and;
    Jun 24 09:06:01 mail CRON[20817]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Jun 24 09:06:01 mail CRON[20818]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    ================

    Any feedback or advise would be appreciated.
    Kind regards,
    Martin
     
  20. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Failures after that are because connection to Internet is lost.
     

Share This Page