ISPConfig on Debian 10 Crashes

Hello,
To install ISPConfig I use the script of Matteo Temporini https://www.howtoforge.com/tutorial/ispconfig-automated-install-script/.
First, I follow the tutorial https://www.howtoforge.com/tutorial/debian-minimal-server/ and then I run the script developed by Matteo Temporini.
I have more than 10 servers installed with above steps (all running fine) however when I installed my latest ISPConfig deployment (Debian 10, 2vCPU, 4GB RAM, 40GB storage) the server started crashing, Website (Wordpress based) and email were running fine, it seems that everything was running fine but the server crashed everyday at the same time.

Any assistance or advice to fix this issue would be appreciated.

Best regards,
Martin

 

Hi Till,

Thank you for your post.
Sorry for the misunderstanding in the title of the post, the correct title would be:
"ISPConfig server based in Debian 10 Crashes"
It happened a few minutes ago, the website (Wordpress based) and ISPConfig control panel down. SSH service also down (I could not connect to the server by SSH). So I logged into server control panel a performed a reboot or powercycle.

The website has low traffic, there are 15 email accounts, most email communication is handled by email clients like Thunderbird, Outlook and webmail.

Any assistance or advice to fix this issue would be appreciated.

Kind regards,

Martin

 

Hello Till, Jesse,
Thank you for your posts.
Enclosed syslog entries just before the latest crash (today) and up to the server started to process email messages.

Any feedback or advise would be appreciated.
Kind regards,
Martin

 

Hello,
Please find fail2ban log.
As you can see in the log, fail2ban started after my reboot at 09:06:12.

Any feedback or advise to fix this issue will be appreciated.

Regards,
Martin

 

Was your workstation IP among the banned?

 

Hello Taleman,
Thank you for your post.
The IP of my workstation was not banned. If you check country of origin of banned IP, most are from China and Russia (maybe spammers, bots, etc.).
Today, I have been checking the web page every five minutes from my phone or desktop. As soon as I checked that the website were not available I tried to log by SSH but SSH was also down, I logged into server panel and rebooted the instance.

Regards,
Martin

 

Looks like your host is a virtual host. Did you check the logs on the real host from the time you could not access your host?
If you can log in from the console of your host, you can see what is going on when SSH is not working.
Do any of the log files, either from virtual host or the real host, show anyting at the time when connections are down?

 

Do you have a few more lines before that? It looks like your servers network card goes down. Do you have a virtual console for your vserver? Should be in your vserver config panel.
Your server looses network connection ~8:50 and gets a hard reset on 9:05. So it is not really crashed.
Do you use DHCP or have a static IP configured?

 

Hello,
Thank you for your posts.
Please find a few lines before network card goes down as requested by Steini86 :
(server name or domain has been edited).
=================
Jun 23 08:50:01 mail CRON[12361]: (getmail) CMD (/usr/local/bin/run-getmail.sh > /dev/null 2>> /dev/null)
Jun 23 08:50:01 mail CRON[12362]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
Jun 23 08:50:01 mail CRON[12364]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
Jun 23 08:50:02 mail pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
Jun 23 08:50:02 mail pure-ftpd: ([email protected]) [INFO] Logout.
Jun 23 08:50:02 mail postfix/smtpd[8714]: connect from localhost[127.0.0.1]
Jun 23 08:50:02 mail postfix/smtpd[8714]: lost connection after CONNECT from localhost[127.0.0.1]
Jun 23 08:50:02 mail postfix/smtpd[8714]: disconnect from localhost[127.0.0.1] commands=0/0
Jun 23 08:50:02 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=</C7SosCoxpR/AAAB>
Jun 23 08:50:02 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<lS7SosCozpJ/AAAB>
Jun 23 08:50:03 mail postfix/smtpd[10631]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 23 08:50:03 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12428, session=<WBngosCohty1QCM6>
Jun 23 08:50:03 mail postfix/smtpd[10631]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 23 08:50:03 mail postfix/submission/smtpd[12057]: connect from unknown[156.96.118.57]
Jun 23 08:50:04 mail postfix/submission/smtpd[12057]: disconnect from unknown[156.96.118.57] ehlo=1 auth=0/1 quit=1 commands=2/3
Jun 23 08:50:04 mail dovecot: pop3([email protected])<12428><WBngosCohty1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/272, size=146005961
Jun 23 08:50:05 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12434, session=<X/P9osCoh9y1QCM6>
Jun 23 08:50:06 mail dovecot: pop3([email protected])<12434><X/P9osCoh9y1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/124, size=63220258
Jun 23 08:50:06 mail postfix/smtpd[10965]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 23 08:50:06 mail postfix/smtpd[10965]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 23 08:50:07 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12436, session=<lMYZo8Coidy1QCM6>
Jun 23 08:50:07 mail dovecot: pop3([email protected])<12436><lMYZo8Coidy1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/53, size=38291417
Jun 23 08:50:12 mail postfix/smtpd[8714]: connect from unknown[185.143.72.16]
Jun 23 08:50:14 mail postfix/smtpd[8707]: connect from unknown[185.143.75.153]
Jun 23 08:50:16 mail postfix/smtpd[9907]: connect from unknown[185.143.72.34]
Jun 23 08:50:19 mail postfix/smtpd[8714]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 23 08:50:20 mail postfix/smtpd[8714]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 23 08:50:21 mail postfix/smtpd[8707]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 23 08:50:21 mail postfix/smtpd[8707]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 23 08:50:24 mail postfix/smtpd[9907]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 23 08:50:24 mail postfix/smtpd[9907]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 23 08:50:28 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12442, session=<5p9ZpMCoQPK1QCM6>
Jun 23 08:50:28 mail dovecot: pop3([email protected])<12442><5p9ZpMCoQPK1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0
Jun 23 08:50:30 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=179.6.192.19, lip=88.198.90.244, mpid=12444, session=<Sgh4pMCojNOzBsAT>
Jun 23 08:50:30 mail dovecot: pop3([email protected])<12444><Sgh4pMCojNOzBsAT>: Disconnected: Logged out top=0/0, retr=0/0, del=0/67, size=21000292
Jun 23 08:50:35 mail postfix/smtpd[10965]: connect from mx16[216.244.165.228]
Jun 23 08:50:37 mail postfix/smtpd[10965]: NOQUEUE: reject: RCPT from mx16 [216.244.165.228]: 450 4.7.1 <bcpmx4>: Helo command rejected: Host not found; from=<> to=<[email protected]> proto=ESMTP helo=<>
Jun 23 08:50:37 mail postfix/smtpd[10965]: disconnect from mx16.bcp.com.pe[216.244.165.228] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
Jun 23 08:50:41 mail postfix/smtpd[10631]: connect from unknown[185.143.75.81]
Jun 23 08:50:42 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12447, session=<ubA3pcCotOO1QCM6>
Jun 23 08:50:43 mail dovecot: pop3([email protected])<12447><ubA3pcCotOO1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/272, size=146005961
Jun 23 08:50:45 mail dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=181.64.35.58, lip=88.198.90.244, mpid=12449, session=<thFcpcCoteO1QCM6>
Jun 23 08:50:45 mail dovecot: pop3([email protected])<12449><thFcpcCoteO1QCM6>: Disconnected: Logged out top=0/0, retr=0/0, del=0/126, size=80673490
Jun 23 08:50:48 mail postfix/smtpd[8714]: connect from unknown[185.143.72.25]
Jun 23 08:50:49 mail postfix/smtpd[10631]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 23 08:50:49 mail postfix/smtpd[10631]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 23 08:50:56 mail postfix/smtpd[8714]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 23 08:50:57 mail postfix/smtpd[8714]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 23 08:50:58 mail named[633]: no longer listening on 88.198.90.244#53
======================
On the other side I visited: https://www.faqforge.com/linux/debugging-ispconfig-3-server-actions-in-case-of-a-failure/ and enabled the debug Loglevel in ISPConfig
When I run: /usr/local/ispconfig/server/server.sh
I get:
23.06.2020-23:47 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
23.06.2020-23:47 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
========================
Finally, regarding Taleman post; I logged into my virtual host panel and there are no logs of the real host (it seems that this function is not enabled in Hetzner) .

Additionally, the server has a static IP address.

Any feedback will be appreciated.

Martin

 

Hello,
I forgot to mention that are a few messages in the inbox of root user (cat /var/spool/mail/root):
=================
From [email protected] Tue Jun 16 16:43:58 2020
Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from localhost (localhost [127.0.0.1])
by mail.mydomain.com (Postfix) with ESMTP id 60FB261831
for <[email protected]>; Tue, 16 Jun 2020 16:43:58 -0500 (-05)
X-Virus-Scanned: Debian amavisd-new at mail.mydomain.com
Received: from mail.mydomain.com ([127.0.0.1])
by localhost (mail.mydomain.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id yxBL3sQ8Qed2 for <[email protected]>;
Tue, 16 Jun 2020 16:43:33 -0500 (-05)
Received: by mail.mydomain.com (Postfix, from userid 0)
id 7AA3561848; Tue, 16 Jun 2020 16:26:09 -0500 (-05)
From: [email protected] (Cron Daemon)
To: [email protected]
Subject: ***UNCHECKED*** Cron <root@mail>
/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo
`/bin/date` "$line" >> /var/log/ispconfig/cron.log; done
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <HOME=/root>
X-Cron-Env: <PATH=/usr/bin:/bin>
X-Cron-Env: <LOGNAME=root>
Message-Id: <[email protected]>
Date: Tue, 16 Jun 2020 16:26:09 -0500 (-05)

/bin/sh: fork: cannot allocate memory
================
but this messages are until June 16.

Regards
Martin

 

What is the situation with memory now?

Code:

free -h

df -hT

 

Hello,
Here the information requested:
root@mail:~# free -h
total used free shared buff/cache available
Mem: 3,8Gi 1,6Gi 204Mi 103Mi 1,9Gi 1,8Gi
Swap: 0B 0B 0B
root@mail:~# df -hT
S.ficheros Tipo Tamaño Usados Disp Uso% Montado en
udev devtmpfs 1,9G 0 1,9G 0% /dev
tmpfs tmpfs 386M 40M 347M 11% /run
/dev/sda1 ext4 19G 12G 6,3G 65% /
tmpfs tmpfs 1,9G 0 1,9G 0% /dev/shm
tmpfs tmpfs 5,0M 0 5,0M 0% /run/lock
tmpfs tmpfs 1,9G 0 1,9G 0% /sys/fs/cgroup
/dev/sda15 vfat 121M 130K 120M 1% /boot/efi
tmpfs tmpfs 386M 0 386M 0% /run/user/0
root@mail:~#
===========
Regards,
Martin

 

That host has no swap, so if memory is exhausted it starts killing processes. If you know 4 GB RAM is enough always, you can run without swap.

 

are you able to increase the memory on that host? even for just 24 - 48 hours?
if so, you could try doubling the memory, which may be enough to avoid the loss of connectivity and forced rebooting.
also you could try installing munin, with the multips_memory plugin. and configure that plugin to monitor the obvious suspect packages, apache, amavis, postfix, mysql, php etc.
i know you can't sit there watching the server, waiting for the problem to appear, this will give you a load of graphs of each processes memory usage over time. which you'll still be able to reload and view after a crash/reboot.
won't directly fix your issue, but will at least allow you to identify exactly which process is causing you to run out of memory in the first place, and problems are easier to fix when you know exactly where to look for them.
and the worst case scenario is that it eliminates lack of memory as a cause of your problems.

once you've identified the problem, you'll want to avoid monitoring too much stuff with munin, especially long term, munin logs can really eat up your disk space.

 

Hello,
Thank you for your posts.
The server failed again at 09.06 today.
Below syslog entries when the server failed:
===================
Jun 24 09:06:12 mail named[636]: no longer listening on 88.198.90.244#53
Jun 24 09:06:12 mail postfix/smtpd[17915]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 24 09:06:13 mail postfix/smtpd[17275]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 24 09:06:13 mail ntpd[611]: Deleting interface #3 eth0, 88.198.90.244#123, interface stats: received=1045, sent=1014, dropped=0, active_time=86402 secs
Jun 24 09:06:13 mail ntpd[611]: 162.159.200.123 local addr 88.198.90.244 -> <null>
Jun 24 09:06:13 mail ntpd[611]: 176.96.138.245 local addr 88.198.90.244 -> <null>
Jun 24 09:06:13 mail ntpd[611]: 173.212.196.208 local addr 88.198.90.244 -> <null>
Jun 24 09:06:13 mail ntpd[611]: 85.93.216.115 local addr 88.198.90.244 -> <null>
Jun 24 09:06:13 mail ntpd[611]: 213.239.239.166 local addr 88.198.90.244 -> <null>
Jun 24 09:06:13 mail ntpd[611]: 131.188.3.223 local addr 88.198.90.244 -> <null>
Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> Received signal: wake up
Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> ClamAV update process started at Wed Jun 24 09:06:29 2020
Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> ^Can't query current.cvd.clamav.net
Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> ^Invalid DNS reply. Falling back to HTTP mode.
Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:29 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:29 2020 -> ^ Message: Couldn't resolve host name
Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Jun 24 09:06:29 mail freshclam[580]: Wed Jun 24 09:06:29 2020 -> Trying again in 5 secs...
Jun 24 09:06:34 mail freshclam[580]: Wed Jun 24 09:06:34 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:34 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:34 2020 -> ^ Message: Couldn't resolve host name
Jun 24 09:06:34 mail freshclam[580]: Wed Jun 24 09:06:34 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
Jun 24 09:06:34 mail freshclam[580]: Wed Jun 24 09:06:34 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Jun 24 09:06:34 mail freshclam[580]: Wed Jun 24 09:06:34 2020 -> Trying again in 5 secs...
Jun 24 09:06:39 mail freshclam[580]: Wed Jun 24 09:06:39 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:39 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:39 2020 -> ^ Message: Couldn't resolve host name
Jun 24 09:06:39 mail freshclam[580]: Wed Jun 24 09:06:39 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
Jun 24 09:06:39 mail freshclam[580]: Wed Jun 24 09:06:39 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Jun 24 09:06:39 mail freshclam[580]: Wed Jun 24 09:06:39 2020 -> Trying again in 5 secs...
Jun 24 09:06:44 mail freshclam[580]: Wed Jun 24 09:06:44 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:44 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:44 2020 -> ^ Message: Couldn't resolve host name
Jun 24 09:06:44 mail freshclam[580]: Wed Jun 24 09:06:44 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
Jun 24 09:06:44 mail freshclam[580]: Wed Jun 24 09:06:44 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Jun 24 09:06:44 mail freshclam[580]: Wed Jun 24 09:06:44 2020 -> Trying again in 5 secs...
Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:49 2020 -> !remote_cvdhead: Download failed (6) Wed Jun 24 09:06:49 2020 -> ! Message: Couldn't resolve host name
Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> Giving up on https://database.clamav.net...
Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:49 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:49 2020 -> ^ Message: Couldn't resolve host name
Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Jun 24 09:06:49 mail freshclam[580]: Wed Jun 24 09:06:49 2020 -> Trying again in 5 secs...
Jun 24 09:06:54 mail freshclam[580]: Wed Jun 24 09:06:54 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:54 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:54 2020 -> ^ Message: Couldn't resolve host name
Jun 24 09:06:54 mail freshclam[580]: Wed Jun 24 09:06:54 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
Jun 24 09:06:54 mail freshclam[580]: Wed Jun 24 09:06:54 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Jun 24 09:06:54 mail freshclam[580]: Wed Jun 24 09:06:54 2020 -> Trying again in 5 secs...
Jun 24 09:06:59 mail freshclam[580]: Wed Jun 24 09:06:59 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:06:59 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:06:59 2020 -> ^ Message: Couldn't resolve host name
Jun 24 09:06:59 mail freshclam[580]: Wed Jun 24 09:06:59 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
Jun 24 09:06:59 mail freshclam[580]: Wed Jun 24 09:06:59 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Jun 24 09:06:59 mail freshclam[580]: Wed Jun 24 09:06:59 2020 -> Trying again in 5 secs...
Jun 24 09:07:01 mail CRON[20860]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
Jun 24 09:07:01 mail CRON[20861]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
Jun 24 09:07:04 mail freshclam[580]: Wed Jun 24 09:07:04 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:07:04 2020 -> ^remote_cvdhead: Download failed (6) Wed Jun 24 09:07:04 2020 -> ^ Message: Couldn't resolve host name
Jun 24 09:07:04 mail freshclam[580]: Wed Jun 24 09:07:04 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
Jun 24 09:07:04 mail freshclam[580]: Wed Jun 24 09:07:04 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Jun 24 09:07:04 mail freshclam[580]: Wed Jun 24 09:07:04 2020 -> Trying again in 5 secs...
Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> Reading CVD header (daily.cvd): Wed Jun 24 09:07:09 2020 -> !remote_cvdhead: Download failed (6) Wed Jun 24 09:07:09 2020 -> ! Message: Couldn't resolve host name
Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> ^Failed to get daily database version information from server: https://database.clamav.net
Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> !check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> Giving up on https://database.clamav.net...
Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> !Update failed for database: daily
Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> ^fc_update_databases: fc_update_database failed: HTTP GET failed (11)
Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> !Database update process failed: HTTP GET failed (11)
Jun 24 09:07:09 mail freshclam[580]: Wed Jun 24 09:07:09 2020 -> !Update failed.
================
Before the first entry listed above, there are normal pop3 entries and;
Jun 24 09:06:01 mail CRON[20817]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
Jun 24 09:06:01 mail CRON[20818]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
================

Any feedback or advise would be appreciated.
Kind regards,
Martin

 

Failures after that are because connection to Internet is lost.