onice

大家有用 openvas 的吗?能正常更新吗?

  •  
  •   onice · Oct 4, 2020 · 1221 views
    This topic created in 2072 days ago, the information mentioned may be changed or developed.

    我在安装 openvas 的时候,出错的,连接更新服务器被拒绝了,出错信息如下:

    root@ubuntu:~# openvas-setup
    OK: Directory for keys (/var/lib/openvas/private/CA) exists.
    OK: Directory for certificates (/var/lib/openvas/CA) exists.
    OK: CA key found in /var/lib/openvas/private/CA/cakey.pem
    OK: CA certificate found in /var/lib/openvas/CA/cacert.pem
    OK: CA certificate verified.
    OK: Certificate /var/lib/openvas/CA/clientcert.pem verified.
    OK: Certificate /var/lib/openvas/CA/servercert.pem verified.
    
    OK: Your OpenVAS certificate infrastructure passed validation.
    --2020-10-04 12:37:08--  http://dl.greenbone.net/community-nvt-feed-current.tar.bz2
    Resolving dl.greenbone.net (dl.greenbone.net)... 89.146.224.58, 2a01:130:2000:127::d1
    Connecting to dl.greenbone.net (dl.greenbone.net)|89.146.224.58|:80... failed: Connection refused.
    Connecting to dl.greenbone.net (dl.greenbone.net)|2a01:130:2000:127::d1|:80... failed: Network is unreachable.
    rsync: failed to connect to feed.openvas.org (89.146.224.58): Connection refused (111)
    rsync: failed to connect to feed.openvas.org (2a01:130:2000:127::d1): Network is unreachable (101)
    rsync error: error in socket IO (code 10) at clientserver.c(127) [Receiver=3.1.3]
    rsync: failed to connect to feed.openvas.org (89.146.224.58): Connection refused (111)
    rsync: failed to connect to feed.openvas.org (2a01:130:2000:127::d1): Network is unreachable (101)
    rsync error: error in socket IO (code 10) at clientserver.c(127) [Receiver=3.1.3]
    

    挂代理再次执行,依旧这样。 我尝试访问 http://dl.greenbone.net/community-nvt-feed-current.tar.bz2 ,发现无法访问,挂上梯子依旧。 大家的 openvas 能更新吗?更新服务器貌似挂了。

    6 replies    2020-10-04 22:43:19 +08:00
    learningman
        1
    learningman  
       Oct 4, 2020
    yulgang
        2
    yulgang  
       Oct 4, 2020 via iPhone
    国内更新是挺难的,而且服务器那边对连接数也有限制,如果你发现被拒了,等个 10 几分钟后再试。有时候使用手机的网络更新速度非常快。
    其实可以在国外开个 VPS,把那些 nvt 包单独下载回来的,我都是这样更新的。
    kurotsuchi
        3
    kurotsuchi  
       Oct 4, 2020
    和 nessus 使用上有什么区别呢
    onice
        4
    onice  
    OP
       Oct 4, 2020
    @yulgang 能请教下手动下载升级 nvt 包升级的方法吗?
    onice
        5
    onice  
    OP
       Oct 4, 2020
    @kurotsuchi 使用上差不多,都是新建策略,然后建立任务。openvas 是开源的,个人使用用不起 nessus- -
    yulgang
        6
    yulgang  
       Oct 4, 2020 via iPhone
    @onice 开 debug 更新,你会看到他请求的几个 url,每种类型的 feed 都有一个 url 对应文件列表,批量下载回来就可以了
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   3019 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 35ms · UTC 13:21 · PVG 21:21 · LAX 06:21 · JFK 09:21
    ♥ Do have faith in what you're doing.