Graziano, Do you find that changes to other configuration sections of ASSP make a difference (ex: RBL, SRS, etc....)? Or just when you change the configuration values of ClamAV/ASSP ClamAV section?
Thanks, Eric "Graziano" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Hello > > I have NO problem running clamd with following (strict) configurations > > FixStaleSocket > ScanMail > LocalSocket /var/clamd > MaxConnectionQueueLength 12 > StreamMaxLength 1M > MaxThreads 5 > ReadTimeout 60 > IdleTimeout 20 > MaxDirectoryRecursion 2 > SelfCheck 3600 > ScanPE > ScanOLE2 > ScanMail > ScanHTML > ScanArchive > ArchiveMaxFileSize 1M > ArchiveMaxRecursion 1 > ArchiveMaxFiles 50 > ArchiveMaxCompressionRatio 0 > ArchiveLimitMemoryUsage > > and with asp configured as follow > ####################################################### > > > External Attachment Blocking > 1 > Whitelisted & Local Attachment Blocking > 0 > > NoProcessing Attachment Blocking > 1 > > Level 4 Allowed File Extensions > doc|xls|ppt|pdf|zip|rtf|txt > > Level 1 Blocked File Extensions > exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|cmd|com|ht[ab] > > > Level 2 Blocked File Extensions > empty > > Level 3 Blocked File Extensions > zip > > Use Av Clamd > checked > > > Port or file socket for local Av Clamd > /var/clamd > > > Size of buffer for Av Clamd > 512 > > Check local email by Av Clamd > UNCHECKED > > AV Bytes > 10000 > =================================================================== > =================================================================== > > Using this strict settings above I have no problem also on very old > servers . > > Using above conf on an old pentium IV celeron I have this stat > 44 virus detected with 7 days working and 57747 messages processed . > > If I use a less strict configuration , I have serious problem too. > With current configuration , 0 problems. > > Talking about cpu usage I have read good things about Mail::ClamAV > http://search.cpan.org/~sabeck/Mail-ClamAV-0.17/ClamAV.pm > assp uses instead File::Scan::ClamAV , I don't know which is better . > > Graziano > > > > > > > > > > > > > > >> On 06/12/2006, at 6:12 PM, Eric B. wrote: >> >> >>>> Every now and then I notice that there are no new entries in ASSP's >>>> log. Looking at Activity Monitor I notice that clamd and kernel_task >>>> are both running at about 57% of CPU. kernel_task usually runs at >>>> less than 1%. >>>> >>>> As soon as I quit clamd, mail starts flowing flowing through ASSP >>>> (after it realises that it can't connect to the socket). clamd.log >>>> doesn't say anything, - the last entries say "SelfCheck: Database >>>> status OK". >>>> >>> If you are running ClamAV integrated with ASSP, then yes - several >>> users >>> have already reported that this is a significant slowdown for ASSP, >>> and >>> everyone has recommended putting it outside ASSP. Either on the >>> MTA itself, >>> or a intermediate MTA that does nothing but AV & relaying between >>> ASSP and >>> your actual MTA. I'm not entirely sure where the slowdown is, but >>> likely >>> something related to the fact that ASSP is single threaded. >>> >>> Eric >>> >> >> Yes I am running ClamAV integrated with ASSP. If, as you suggest, it >> is something to do with integration of ASSP with ClamAV, not ClamAV >> itself, then I will go back to using ClamSMTP. >> >> Thanks Eric, >> >> James. >> >> ------------------------------------------------------------------------- >> Take Surveys. Earn Cash. Influence the Future of IT >> Join SourceForge.net's Techsay panel and you'll get the chance to share >> your >> opinions on IT & business topics through brief surveys - and earn cash >> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >> _______________________________________________ >> Assp-user mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/assp-user >> >> > > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share > your > opinions on IT & business topics through brief surveys - and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
