Hello I have NO problem running clamd with following (strict) configurations
FixStaleSocket ScanMail LocalSocket /var/clamd MaxConnectionQueueLength 12 StreamMaxLength 1M MaxThreads 5 ReadTimeout 60 IdleTimeout 20 MaxDirectoryRecursion 2 SelfCheck 3600 ScanPE ScanOLE2 ScanMail ScanHTML ScanArchive ArchiveMaxFileSize 1M ArchiveMaxRecursion 1 ArchiveMaxFiles 50 ArchiveMaxCompressionRatio 0 ArchiveLimitMemoryUsage and with asp configured as follow ####################################################### External Attachment Blocking 1 Whitelisted & Local Attachment Blocking 0 NoProcessing Attachment Blocking 1 Level 4 Allowed File Extensions doc|xls|ppt|pdf|zip|rtf|txt Level 1 Blocked File Extensions exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|cmd|com|ht[ab] Level 2 Blocked File Extensions empty Level 3 Blocked File Extensions zip Use Av Clamd checked Port or file socket for local Av Clamd /var/clamd Size of buffer for Av Clamd 512 Check local email by Av Clamd UNCHECKED AV Bytes 10000 =================================================================== =================================================================== Using this strict settings above I have no problem also on very old servers . Using above conf on an old pentium IV celeron I have this stat 44 virus detected with 7 days working and 57747 messages processed . If I use a less strict configuration , I have serious problem too. With current configuration , 0 problems. Talking about cpu usage I have read good things about Mail::ClamAV http://search.cpan.org/~sabeck/Mail-ClamAV-0.17/ClamAV.pm assp uses instead File::Scan::ClamAV , I don't know which is better . Graziano > On 06/12/2006, at 6:12 PM, Eric B. wrote: > > >>> Every now and then I notice that there are no new entries in ASSP's >>> log. Looking at Activity Monitor I notice that clamd and kernel_task >>> are both running at about 57% of CPU. kernel_task usually runs at >>> less than 1%. >>> >>> As soon as I quit clamd, mail starts flowing flowing through ASSP >>> (after it realises that it can't connect to the socket). clamd.log >>> doesn't say anything, - the last entries say "SelfCheck: Database >>> status OK". >>> >> If you are running ClamAV integrated with ASSP, then yes - several >> users >> have already reported that this is a significant slowdown for ASSP, >> and >> everyone has recommended putting it outside ASSP. Either on the >> MTA itself, >> or a intermediate MTA that does nothing but AV & relaying between >> ASSP and >> your actual MTA. I'm not entirely sure where the slowdown is, but >> likely >> something related to the fact that ASSP is single threaded. >> >> Eric >> > > Yes I am running ClamAV integrated with ASSP. If, as you suggest, it > is something to do with integration of ASSP with ClamAV, not ClamAV > itself, then I will go back to using ClamSMTP. > > Thanks Eric, > > James. > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share your > opinions on IT & business topics through brief surveys - and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user > > ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
