Le Ven 3 d�c 10:09:48 2004, Samuel Benzaquen �crit:
> I think it could be nice to have like a list of "known systems". That way a
> newbie could read and choose the best for his needs.
On my side, I use two systems
- one for my workstation, it's based on procmail
and a self made clamd client
(ftp://victor.teaser.fr/pub/lwa/clamd-stream-client/)
- for the main job, we have clusters of postfix SMTP servers
who forward messages to LMTP server who make the check
(LMTP server at http://pll.sourceforge.net/)
So, only the incoming messages are scanned. This is more easy to do
and users don't send much virus back when they receive none. Also, our
SMTP outgoing servers limit the flow of outgoing message per minut and
per IP address. This limit the spam and virus sending.
All these use the same cluster of two Clamd servers on poor PIII 750
that sync the virus database 8 times a day about the same hour to have
the servers in the same state. The sync is triggered by cron.
The infected messages does not generate any bounce. Per default, a
notification reporting the original header is dropped in the mailbox
instead of the the virus. Users have the ability to receive nothing or
to receive the virus and maybe store them in a folder if they want to
make a collection or don't trust the antivirus.
Also, our SMTP incoming servers check strictly the RFC, so many virus
are early rejected and does not pass to clamav.
We manage between 250k and 300k deliverable messages daily. Here are
our virus top 10 stat for one of 3 lmtp server/clamd clients, for 95k
messages yesterday :
Detected Virus
Count Size Time Name
--------------------------------------------------
4450 327.84 Mbytes 1835.45 Worm.Sober.I
3480 138.09 Mbytes 2303.14 Worm.SomeFool.P
2292 60.01 Mbytes 1168.41 Worm.SomeFool.Gen-1
662 19.64 Mbytes 219.58 Worm.SomeFool.Gen-2
404 11.31 Mbytes 116.40 Worm.Bagle.Z
370 12.85 Mbytes 382.23 Worm.SomeFool.X
353 10.49 Mbytes 213.73 Worm.SomeFool.Z
347 10.36 Mbytes 58.21 Worm.Bagle.AT
244 25.47 Mbytes 115.74 Worm.Bagle.Gen-vbs
179 5.67 Mbytes 44.90 Worm.Bagle.AC
(...)
---- ----- ----- -------
13900 665.04 Mbytes 6962.67 TOTAL
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
