Bill Shupp said: > Thanks for the quick response. > > Fajar A. Nugraha wrote: >> Are you scanning all email? > > Not outgoing mail (from our users), but all incoming mail, yes.
Don't you think it a bit rude to require all of us to scan your user's mail for you? > The > message size limit in qmail was set to 15MB, with the clamd.conf limits > set at 10MB. I noticed that when clamd was pegged, the clamav > directories were almost all using 10MB of disk space. > >> Scanning large emails (e.g over 10MB) needs quite a lot of resource, and >> if your system receives lots of them, the load can increase greatly. If >> you have slow CPU, or handle lots of email traffic, it might be useful >> to tell simscan to only scan emails < 1 MB. > > > > I did 2 things: > > 1) Lowered the incoming file size limit to 1MB for now > 2) Recompiled clamd and clamdscan with the -static argument to gcc to > force the clamav library to be compiled statically (as suggested on this > list to solve CPU saturation). > > I'm not sure if one or both of these things solved the problem, but > currently CPU usage for clamd is back to normal. I will be > experimenting with raising the file size limit and see if the problem > resurfaces. > > Regards, > > Bill Shupp What it means is you won't stop viruses in files larger than 1 meg. So now you're not stopping them coming or going. Are you stopping any attachments be filename prior to scanning? There's no reason to scan .com, .exe, .scr, etc. files if you refuse them up front. This greatly offloads your scanner. I don't care much for thier products, but these people do seem to recognize danger when they see it - if these files are not good enough for them they're certainly not good enough for me. http://support.microsoft.com/default.aspx?scid=kb;EN-US;q262631 dp _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
