Hello,
Yes, we do, well I call it highly loaded but that is relative so I will
post the status below, we have 12,000 users or so. We have two slackware
linux MX boxes that prescan for spam and viruses (the scan is done in the
data stream and 550 error is produced so we have no bounce message we let
their machine or their mail server do the bounce), we use exim with the
exiscan-acl patch (from duncanthrax.net) and it is using
clamd/spamassassin. The MX servers then just pass on the good mail via a
hub routing rule. If it does get a socket error it queues it, it does not
let it on though (which makes for interesting load effect if one of the
daemons die :P). The main mail server also scans for viruses in case some
skip the mail mx and for outgoing email (I use an md5 signature added on
my outside boxes to avoid rescanning what they already approved). In
exiscan I use the demime function and tell it to refuse .vbs, .scr and
.pif which keeps some load off the virus daemon in itself.
Here is yesterdays 24 hour rejection stats, we had 73865 good emails
delivered out of 260870 attempts. A few days ago, the unwanted was about
three times last nights amount due to a new virus that used the extention
.pif and .scr:
MX1 MX2 MAIL
rejected: 114964 116348 29558
blacklist: 42003 44927 652
spam: 52941 52062 0
viruses: 408 362 560
unwanted: 5601 6064 567
other: 14011 12933 27779
"unwanted" is file extensions (scr:vbs:bat:lnk:pif) which is
potential virii. "other" can be protocol errors, and
non-resolvable return addresses, etc that are killed at the front door,
as you can see most viruses never have a chance to load the clamd
daemon since the demime function gets most potential ones.
later
Randal
On Tue, 26 Aug 2003, Olaf Zaplinski wrote:
> Hi,
>
> now I found it - installed clamav-0.60 on both FreeBSD and Linux, and both
> fail regularly...
>
> Aug 25 23:47:28 frodo sendmail[38162]: h7PLlSNd038162: Milter (clmilter): to
> error state
> Aug 25 23:47:28 frodo sendmail[38162]: h7PLlSNd038162: Milter:
> initialization failed, temp failing commands
> Aug 25 23:47:28 frodo sendmail[38163]: h7PLlSNd038163: Milter (clmilter):
> error connecting to filter: Connection refused by
> /usr/local/var/clamav/clmilter.sock
>
> So I don't think this is libmilter or OS specific.
>
> I would like to tell the deveolper(s). BTW, is he/they reading this list?
>
> And: is somebody here using clamav on a rather high loaded email server? If
> yes, what configuration? What OS? HOW TO do?
>
> Regards
> Olaf
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: VM Ware
> With VMware you can run multiple operating systems on a single machine.
> WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
> at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
> _______________________________________________
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
>
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
