asl-lite issue
Posted: Sun Oct 06, 2013 3:33 pm
i'm seeing issues getting subscribed rules with asl-lite:
# asl-lite -u
Checking for updates..
ASL version is current: package asl is not installed
[OK]
APPINV rule updates are available: 201308071122 [INFO]
CLAMAV rule updates are available: 201310061404 [INFO]
GEOMAP rule updates are available: 201310061338 [INFO]
Update failed for some reason, retrying with full debug information...
--2013-10-06 21:20:07-- http://czar:*password*@www.atomicorp.co ... 404.tar.gz
Resolving http://www.atomicorp.com... 198.71.51.132
Connecting to http://www.atomicorp.com|198.71.51.132|:80... connected.
HTTP request sent, awaiting response... 401 Authorization Required
Reusing existing connection to http://www.atomicorp.com:80.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: http://updates.atomicorp.com/channels/r ... 404.tar.gz [following]
--2013-10-06 21:20:08-- http://updates.atomicorp.com/channels/r ... 404.tar.gz
Resolving updates.atomicorp.com... 74.208.166.51, 74.208.172.195, 74.208.112.216, ...
Connecting to updates.atomicorp.com|74.208.166.51|:80... connected.
HTTP request sent, awaiting response... 401 Authorization Required
Authorization failed.
exiting...
was fixed with:
# cat /etc/hosts | grep ato
74.208.166.51 http://www.atomicorp.com
it seems not to do authorization at updates.atomicorp.com since it made it at http://www.atomicorp.com
Fix is working:
# asl-lite -u
Checking for updates..
ASL version is current: package asl is not installed
[OK]
APPINV rule updates are available: 201308071122 [INFO]
CLAMAV rule updates are available: 201310061404 [INFO]
GEOMAP rule updates are available: 201310061338 [INFO]
Updating MODSEC to 201310061404: updated [OK]
OSSEC rule updates are available: 201309301638 [INFO]
# asl-lite -u
Checking for updates..
ASL version is current: package asl is not installed
[OK]
APPINV rule updates are available: 201308071122 [INFO]
CLAMAV rule updates are available: 201310061404 [INFO]
GEOMAP rule updates are available: 201310061338 [INFO]
Update failed for some reason, retrying with full debug information...
--2013-10-06 21:20:07-- http://czar:*password*@www.atomicorp.co ... 404.tar.gz
Resolving http://www.atomicorp.com... 198.71.51.132
Connecting to http://www.atomicorp.com|198.71.51.132|:80... connected.
HTTP request sent, awaiting response... 401 Authorization Required
Reusing existing connection to http://www.atomicorp.com:80.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: http://updates.atomicorp.com/channels/r ... 404.tar.gz [following]
--2013-10-06 21:20:08-- http://updates.atomicorp.com/channels/r ... 404.tar.gz
Resolving updates.atomicorp.com... 74.208.166.51, 74.208.172.195, 74.208.112.216, ...
Connecting to updates.atomicorp.com|74.208.166.51|:80... connected.
HTTP request sent, awaiting response... 401 Authorization Required
Authorization failed.
exiting...
was fixed with:
# cat /etc/hosts | grep ato
74.208.166.51 http://www.atomicorp.com
it seems not to do authorization at updates.atomicorp.com since it made it at http://www.atomicorp.com
Fix is working:
# asl-lite -u
Checking for updates..
ASL version is current: package asl is not installed
[OK]
APPINV rule updates are available: 201308071122 [INFO]
CLAMAV rule updates are available: 201310061404 [INFO]
GEOMAP rule updates are available: 201310061338 [INFO]
Updating MODSEC to 201310061404: updated [OK]
OSSEC rule updates are available: 201309301638 [INFO]