Hey Walter, It's sitting behind: DDoS protection by Cloudflare So it makes sense that you would not be able to download it using wget. The only option probably is using a web browser. I would suggest contacting clamav.net web/system admins to verify what are the options. All The Bests, Eliezer ---- Eliezer Croitoru Tech Support Mobile: +972-5-28704261 Email: ngtech1ltd@xxxxxxxxx Zoom: Coming soon -----Original Message----- From: squid-users <squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx> On Behalf Of Walter H. Sent: Wednesday, March 10, 2021 7:55 AM To: Squid Users <squid-users@xxxxxxxxxxxxxxxxxxxxx> Subject: a specific host generates a 503 ... Hello, can someone test the following URL http://db.local.clamav.net/daily-26102.cdiff e.g. wget http://db.local.clamav.net/daily-26102.cdiff I have an older squid (v3.1) there this works, but with the newer ones (v3.4 and v3.5) this doesn't; is there an explanation why? the log shows this: client-ip - - [10/Mar/2021:06:43:50 +0100] "GET http://db.local.clamav.net/daily-26102.cdiff HTTP/1.0" 503 8645 "-" "Wget/1.12 (linux-gnu)" TCP_MISS:HIER_DIRECT the suspicious thing: when using a browser: this works with any squid, but this doesn't help because the clamav signature updates are loaded by the freshclam which shows the same failure as e.g. wget client-ip - - [09/Mar/2021:06:00:03 +0100] "GET http://db.local.clamav.net/daily-26102.cdiff HTTP/1.0" 503 8642 "-" "ClamAV/0.103.1 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)" TCP_MISS:HIER_DIRECT I noticed this two days after the nightly freshclam (signature update) failure, and changed the freshclam config to use the squid v3.1; Thanks, Walter _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users