On Sat, Aug 18, 2007 at 06:45:25AM -0400, Michael Scheidell wrote:
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf
> > Of Matthew Kitchin (Usenet/Lists)
> > Sent: Friday, August 17, 2007 10:03 PM
> > To: [email protected]
> > Subject: [AMaViS-user] Keep going if AV Scanner fails?
> >
> > unavailable. I would
> > prefer it continue to pass the mail and maybe blast massive
> > warnings to
> > specified email addresses.
>
> You could use clamav (not clamd) as secondary scanner, and as for
> socket, normal types of things like swatch to watch logs would help.
Have you tried to run clamscan lately? When I was setting up my
latest amavisd system I had socket permission problems for the clamd
socket, and my test messages were taking *minutes* to scan. I assumed
this was because clamscan was taking so long to parse the signature
dictionary at each invocation.
I'm not sure that clamscan is a reasonable fallback strategy any
more, at least for mail volumes beyond a home server.
To answer the original OP, if it's *really* OK in your scenario to
pass through mails without scanning when the main AV is down, you could
easily set up a dummy secondary scanner which just returns "OK" without
checking the file.
-- Clifton
--
Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED]
President - I and I Computing * http://www.iandicomputing.com/
Custom programming, network design, systems and network consulting services
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/