大家有用 openvas 的吗？能正常更新吗？

[onice]

我在安装 openvas 的时候，出错的，连接更新服务器被拒绝了，出错信息如下：

root@ubuntu:~# openvas-setup
OK: Directory for keys (/var/lib/openvas/private/CA) exists.
OK: Directory for certificates (/var/lib/openvas/CA) exists.
OK: CA key found in /var/lib/openvas/private/CA/cakey.pem
OK: CA certificate found in /var/lib/openvas/CA/cacert.pem
OK: CA certificate verified.
OK: Certificate /var/lib/openvas/CA/clientcert.pem verified.
OK: Certificate /var/lib/openvas/CA/servercert.pem verified.

OK: Your OpenVAS certificate infrastructure passed validation.
--2020-10-04 12:37:08--  http://dl.greenbone.net/community-nvt-feed-current.tar.bz2
Resolving dl.greenbone.net (dl.greenbone.net)... 89.146.224.58, 2a01:130:2000:127::d1
Connecting to dl.greenbone.net (dl.greenbone.net)|89.146.224.58|:80... failed: Connection refused.
Connecting to dl.greenbone.net (dl.greenbone.net)|2a01:130:2000:127::d1|:80... failed: Network is unreachable.
rsync: failed to connect to feed.openvas.org (89.146.224.58): Connection refused (111)
rsync: failed to connect to feed.openvas.org (2a01:130:2000:127::d1): Network is unreachable (101)
rsync error: error in socket IO (code 10) at clientserver.c(127) [Receiver=3.1.3]
rsync: failed to connect to feed.openvas.org (89.146.224.58): Connection refused (111)
rsync: failed to connect to feed.openvas.org (2a01:130:2000:127::d1): Network is unreachable (101)
rsync error: error in socket IO (code 10) at clientserver.c(127) [Receiver=3.1.3]

挂代理再次执行，依旧这样。 我尝试访问 http://dl.greenbone.net/community-nvt-feed-current.tar.bz2 ，发现无法访问，挂上梯子依旧。 大家的 openvas 能更新吗？更新服务器貌似挂了。

[learningman]

http://dl.greenbone.net/community-nvt-feed-current.tar.bz2
这个地址在我这里 502 了

[yulgang]

国内更新是挺难的，而且服务器那边对连接数也有限制，如果你发现被拒了，等个 10 几分钟后再试。有时候使用手机的网络更新速度非常快。
其实可以在国外开个 VPS，把那些 nvt 包单独下载回来的，我都是这样更新的。

[kurotsuchi]

和 nessus 使用上有什么区别呢

[onice]

@yulgang 能请教下手动下载升级 nvt 包升级的方法吗？

[onice]

@kurotsuchi 使用上差不多，都是新建策略，然后建立任务。openvas 是开源的，个人使用用不起 nessus- -

[yulgang]

@onice 开 debug 更新，你会看到他请求的几个 url，每种类型的 feed 都有一个 url 对应文件列表，批量下载回来就可以了