Email Anti-Virus only updating manually

[kennysarmy]

We run Mdaemon with the add on "Security Plus" - which was recently update, and that's when the trouble started!

 

I can go through the GUI and click "Update AV Signature now" and it updates 100%

 

But if I set the scheduler to do updates *say hourly* they fail:

 

Using the GUI:

2017-11-22,15:44:44,-- SPUPDATER START --,,

2017-11-22,15:44:44,Version 5.5.0,,

2017-11-22,15:44:44,Subscription active: 354 days left,,

2017-11-22,15:44:45,Definition version: 201711221313,,

2017-11-22,15:44:51,Download file,OK,http://files.altn.com/antivirus/ctav/updates/antivir-v2-i-201711221313.zip

2017-11-22,15:44:58,Install file,OK,d:\ilibra\MDAEMON\Temp\CTAVWORK\20171122154451\antiviri-v2.def

2017-11-22,15:44:59,New definition version: 201711221433,,

2017-11-22,15:44:59,Virus definitions updated successfully.,,

2017-11-22,15:45:02,-- SPUPDATER END --,,

 

 

Letting it do it automatically:

17-11-22,15:20:09,-- SPUPDATER START --,,

2017-11-22,15:20:09,Version 5.5.0,,

2017-11-22,15:20:09,Subscription active: 354 days left,,

2017-11-22,15:20:09,Definition version: 201711221313,,

2017-11-22,15:20:51,HttpSendRequestEx() failed while trying to access http://files.altn.com/antivirus/ctav/updates/antivir-v2-hit.ini,,

2017-11-22,15:20:51,Error code (12029): unknown error,,

2017-11-22,15:21:33,HttpSendRequestEx() failed while trying to access http://files.altn.com/antivirus/ctav/updates/antivir-v2-z-.ini,,

2017-11-22,15:21:33,Error code (12029): unknown error,,

2017-11-22,15:21:33,Could not connect to any server.,FAILED,

2017-11-22,15:21:33,Update process failed!,,

2017-11-22,15:21:34,-- SPUPDATER END --,,

 

 

The Mdaemon service starts under the system LOCAL account, when I change this to my own domain admin account - the auto updates work!

 

I've set the system proxy using this:

Run cmd as administrator:

netsh

winhttp

show proxy

import proxy source=ie

show proxy

 

 

We have a smoothwall on site and I've added the mail server IP address to the source exception addresses and verified the mail server has internet access using port 801 (unfiltered)

 

 

There is a separate setting in the AV plugin to set a proxy, this is currently set as "Automatically detect proxy server address".

 

 

I'm stuck

[kennysarmy]

Tests this morning:

 

Mdaeamon starts with LOCAL SYSTEM service credentials.

 

1. IE set with port 801 - on site smoothwall, the mail server IP set on smoothwall as proxy source exception (unfiltered access!)

Antivirus Updater Configuration - use proxy - auto detect settings

WinHTTP proxy settings: Proxy Server(s) : :801 (should be what SYSTEM uses!)

 

Manual update OK

Auto not working - still don't understand why this would not work...

 

 

2. IE set with port 444 - incorrect details (no browsing possible)

Antivirus Updater Configuration - use proxy - auto detect settings

WinHTTP proxy settings: Proxy Server(s) : :801 (should be what SYSTEM uses!)

 

Manual update fails - as expected.

Auto not working - still don't understand why this would not work...

 

 

3. IE set with port 444 - incorrect details (no browsing possible)

Antivirus Updater Configuration - use custom proxy server address - port 801 - on site smoothwall, the mail server IP set on smoothwall as proxy source exception (unfiltered access!)

Current WinHTTP proxy settings: Proxy Server(s) : :801 (should be what SYSTEM uses!)

 

Manual update fails - WHY? Should the proxy set in Antivirus Updater Configuration not take precedence over the incorrect details in IE ??

Auto not working

 

 

 

Mdaeamon starts with ADMIN user credentials ([email protected])

 

4. IE set with port 801 - on site smoothwall, proxy source exception (unfiltered access!)

Antivirus Updater Configuration - use proxy - auto detect settings

Current WinHTTP proxy settings: Proxy Server(s) : :801 (should be what SYSTEM uses!)

 

Manual update OK

Auto OK

 

5. IE set with port 444 - incorrect details (no browsing possible)

Antivirus Updater Configuration - use proxy - auto detect settings

Current WinHTTP proxy settings: Proxy Server(s) : :801 (should be what SYSTEM uses!)

 

Manual update fails - as expected.

Auto not working - why failing?

 

6. IE set with port 444 - incorrect details (no browsing possible)

Antivirus Updater Configuration - use custom proxy server address - port 801 - on site smoothwall, proxy source exception (unfiltered access!)

Current WinHTTP proxy settings: Proxy Server(s) : :801 (should be what SYSTEM uses!)

 

Manual update fails - WHY? Should the proxy set in Antivirus Updater Configuration not take precedence over the incorrect details in IE ??

Auto not working

 

 

 

Mdaeamon starts with ADMIN user credentials ([email protected])

 

7. IE set with port 801 - on site smoothwall, proxy source exception (unfiltered access!)

Antivirus Updater Configuration - use proxy - auto detect settings

Current WinHTTP proxy settings: Proxy Server(s) : 10.107.1.1:444 (Dummy values should give no access to internet for SYSTEM account -- not being used for this and below tests)

 

Manual update OK

Auto OK

 

8. IE set with port 444 - incorrect details (no browsing possible)

Antivirus Updater Configuration - use proxy - auto detect settings

Current WinHTTP proxy settings: Proxy Server(s) : 10.107.1.1:444 (Dummy values should give no access to internet for SYSTEM account -- not being used for this and below tests)

 

Manual update fails - as expected.

Auto not working

 

9. IE set with port 444 - incorrect details (no browsing possible)

Antivirus Updater Configuration - use custom proxy server address - port 801 - on site smoothwall, proxy source exception (unfiltered access!)

Current WinHTTP proxy settings: Proxy Server(s) : 10.107.1.1:444 (Dummy values should give no access to internet for SYSTEM account -- not being used for this test)

 

Manual update fails - WHY? Should the proxy set in Antivirus Updater Configuration not take precedence over the incorrect details in IE ??

Auto not working

 

 

 

Mdaeamon starts with LOCAL SYSTEM service credentials.

 

10. IE set with port 801 - on site smoothwall, proxy source exception (unfiltered access!)

Antivirus Updater Configuration - use proxy - auto detect settings

Current WinHTTP proxy settings: Proxy Server(s) : 10.107.1.1:444 (Dummy values should give no access to internet for SYSTEM account -- not being used for this and below tests)

 

Manual update OK

Auto not working - as expected (?)

 

11. IE set with port 444 - incorrect details (no browsing possible)

Antivirus Updater Configuration - use proxy - auto detect settings

Current WinHTTP proxy settings: Proxy Server(s) : 10.107.1.1:444 (Dummy values should give no access to internet for SYSTEM account -- not being used for this and below tests)

 

Manual update fails - as expected.

Auto not working - as expected (?)

 

12. IE set with port 444 - incorrect details (no browsing possible)

Antivirus Updater Configuration - use custom proxy server address - port 801 - on site smoothwall, proxy source exception (unfiltered access!)

Current WinHTTP proxy settings: Proxy Server(s) : 10.107.1.1:444 (Dummy values should give no access to internet for SYSTEM account -- not being used for this test)

 

Manual update fails - WHY? Should the proxy set in Antivirus Updater Configuration not take precedence over the incorrect details in IE ??

Auto not working - as expected (?)