I just terminate my F-Prot 6, and installed ClamAV SOSDG
Before that, my CPU usage is always run to skyhigh,
at around 70%-100%, now using ClamAV, reduce
to 5%-20%, still catching all the testing virus.
F-prot 6 do not provide option like noboot, nomem,
I guess these become the default
Interesting that you are also seeing the 70-100% CPU with F-Prot 6, where we
are not.
Are you running AVAFTERJM?
Darin.
- Original Message -
From: Brian Lin [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Friday, June 13, 2008 5:23 AM
Subject: Re: [Declude.Virus] F-PROT 6 vs
No, I am still using antique version declude and
imail.
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Friday, June 13, 2008 8:07 PM
Subject: Re: [Declude.Virus] F-PROT 6 vs ClamAV SOSDG
Interesting that you are also seeing the 70-100% CPU
AVAFTERJM has been around a long time. I don't remember what version, but
it was a 1.x version.
Are you familiar with the setting? It tells Declude to run Anti-Virus after
Junkmail. It then only runs AV after checking to see if the message is
spam. With the spam load these days, I would
Be careful with this setting. If a message gets held as spam it will not be
virus scanned. Make sure you scan any message moved back into the delivery
queue for viruses before placing it in the delivery queue folder.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
Kevin,
Just to be more specific, if you use the HOLD action, those messages
that are held will not be virus scanned.
On our system, we use a combination of COPYFILE and ROUTETO, and they
are in fact virus scanned when using AVAFTERJM.
Matt
Kevin Bilbee wrote:
Be careful with this
The reason for it not working is that the scanner doesn't recognize the
incorrect parameters, and aborts.
We're not seeing the CPU spikes you are, however that may be a difference
with running AV over all messages vs. only on messages that spam filtering.
I'm curious... you say you don't have
