[EMAIL PROTECTED] skrev:
This is an interesting idea.
Clearly your suggestion works for your load balancing technology, but it may
not work for others, since the target IP addresses may not be reachable from
the client side.
Yes, that is the downside to our approach (not applicable in our
environment though). The positive points are that the needed changes to
clamd+clamdscan are smaller and that you (possibly) consume less
resources on the loadbalancer since the clients send the data directly
to the clamd server.
Meanwhile.... A month ago, I proposed to Tomasz Kojm the addition of a command which I
called "CHUNKEDSTREAM", which would also solve your problem. This command
passes all the data to be scanned on the same TCP socket as the clamd command and its
response. The data is passed in size prefixed chunks terminated with a zero sized chunk.
I totally agree that this is a much better solution though (both for our
case and the other reasons you state), and would be more than happy if
CHUNKEDSTREAM could be added to a future version of clamav.
In the mean time I will try out your patch, which looks great.
Best regards,
Jimmy
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
