The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

dm-0: write failed, user block limit reached. Updating freshclam

Discussion in 'General Discussion' started by santrix, Feb 17, 2009.

  1. santrix

    santrix Well-Known Member

    Joined:
    Nov 30, 2008
    Messages:
    223
    Likes Received:
    2
    Trophy Points:
    18
    I'm posting this here as I suspect this may not be clamav specific.

    Last night, while freshclam ran, it failed the update. I have restarted exim, and clamav via the scripts, and tried freshclam again, but stil get this:

    root@mybox [~]# freshclam
    ClamAV update process started at Tue Feb 17 09:11:17 2009
    Trying host database.clamav.net (64.142.100.50)...
    Downloading main-50.cdiff [100%]
    dm-0: write failed, user block limit reached.
    ERROR: buildcld: Can't add main.mdb to .cld file
    ERROR: Can't create local database

    There is plenty of free disk space (over 5Gb free), so I'm not sure what's going on... all running perfectly for months up until last night.

    Filesystem Size Used Avail Use% Mounted on
    /dev/mapper/VolGroup00-LogVol00
    13G 6.9G 5.1G 58% /
    /dev/sda1 99M 18M 77M 19% /boot
    tmpfs 506M 0 506M 0% /dev/shm
    /usr/tmpDSK 485M 11M 449M 3% /tmp

    Help! Apache seems to be running ok, and exim is running ok, so at least the users are not affected yet.
     
  2. santrix

    santrix Well-Known Member

    Joined:
    Nov 30, 2008
    Messages:
    223
    Likes Received:
    2
    Trophy Points:
    18
    not quite sure what happened here, but I did notice I had a few IP addressses with about 20 connections open this morning... every so and often the IP's would drop, and be replaced by a different IP, which would again open around 20 connections...

    I waited for a gap in the traffic, and tried reshclam again, and it worked.. I'm now wondering if someone is trying to run a DoS attack of some sort... the IP's are T-Mobile and Entanet, so both UK...
     
Loading...

Share This Page