Michael, > Mark: saw the clamdscan entry for 2.7. thanks. i using in now, but > using the --stream option (don't know if it matters)
Probably doesn't matter. The ClamAV docs says it prefers to autodetect what considers the best transfer mode. > would rather amavisd knew how to get there, like CONTSCAN does, but use > zINSTREAM. Must you be running clamd on a different host from the one running amavisd? Transfering contents to a virus scanner over socket and putting it to a file again comes at a price. > with clamdscan, there is the 'added' clamd.backup.conf, and every time > it is called, it has to hit the disk. That probably costs nothing, a decent file system or a disk cache would keep it in the memory if used often. > also noticed you are removing av_smtp in 2.7.* Am I? The 'av_smtp' is still in amavisd.conf with 2.7.0-pre13. I haven't tried it for a while now, but it is supposed to work still. > for zINSTREAM to work: > > client connects to remote tcp socket, sends zINSTREAM\n then sends the > file, when done, closes socket. I have working code to implement this now, I can mail it to you tomorrow for experimenting. Somehow it puzzles me why clamd takes dozens of milliseconds when presented with a full mail message over zINSTREAM, yet the CONTSCAN method is much faster. > been using clamdscan for a while as a backup, since the clamscan cli > takes way too long, and way too much cpu nowadays that if its ever > loaded or used, it will DOS the mail server. Certainly, clamdscan is much faster. As long as it connects to a different scanner - otherwise you still have a single point of failure with clamd, so a clamdscan as a backup scanner would not help. Mark ------------------------------------------------------------------------------ Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user Please visit http://www.ijs.si/software/amavisd/ regularly For administrativa requests please send email to rainer at openantivirus dot org
