ReadyNAS antivirus stopped updating

[mpence]

My ReadyNAS stopped receiving antivirus updates on March 19th 2018.  I suspected that the problem was DPI-SSL scanning on my Sonicwall 5600, because in the past that has caused problems with ReadyNAS firmware updates but that is not the case.  I excluded the ReadyNAS from DPI-SSL scanning but the the antivirus update continues to fail. Does anyone have a suggestion where to look next?

[StephenB · Accepted solution]

If you have ssh enabled, you could try entering  host -t txt current.cvd.clamav.net and see if that resolves without printing an error.

You could also try executing freshclam and see if it updates successfully.

[StephenB]

Can you confirm that the NAS can reach the internet generally?  One way to test that is to turn NTP off and then on again.

[mpence]

Yes I do have access to the internet.  The firmware update still connects and downloads updates.

[StephenB]

You are running 6.9.3?

[mpence]

Yes I am running version 6.9.3. 

[mpence]

I did disable NTP, changed the time, then enabled NTP and set the time server to time.google.com. Time immediately updated correctly.

[StephenB · Accepted solution]

If you have ssh enabled, you could try entering  host -t txt current.cvd.clamav.net and see if that resolves without printing an error.

You could also try executing freshclam and see if it updates successfully.

[mpence]

Thank you for your assistance.

After enabling ssh I ran freshclam -v.

After ignoring several mirrors because of previous errors the update finally started. All updates are now complete.  Is this something that I will need to do on a daily basis or should the updates start working correctly now?  I am wondering if I need to update ClamAV to a newer version?  I did get a warning during the update that the installation is outdated.

[StephenB]

You shouldn't need to do this routinely - I'd just keep on eye on the definitions updates.

Also, since the service is integrated into the ReadyNAS firmware, I wouldn't try to update the application itself.  Netgear should be doing that as needed.