-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

jean-paul natola wrote:

> I'm running;
> Freebsd 5.4 clamav 88.7 SA 3.1.7
> 
> In the paniclog /var/log/exim/paniclog is where I 'm seeing these entries
> I did check the 'messages' log and there are no entries-
> 
> It seems that clamav is timing out when it is attempting to scan large
> messages

Could be a normal situation.

> yesterday I saw clams cpu and mem start to skyrocket, at that moment  i
> looked at what message was being scanned and it was an 18meg file which
> subsequently caused another timeout error
> 
[snip]
> I will now look for- and examine the clam log

Saw your other message, you probably want to enable time stamping to correlate
(with the exim log) what is going on.

> someone suggested to tell exim not to call clam on large messages (over
> 5 megs for example)
> as  virus are always small to spread quicker  -

That's a good idea.  EximConfig could be a long term option, even if you only
need to change the configuration, for an example look at :

http://duncanthrax.net/exiscan-acl/exiscan-acl-examples.txt
- --
René Berber
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Cygwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFgu1zL3NNweKTRgwRAuUKAJ4tZsYrYxlB/NlJPvYAY8s53qbKNgCgwY7E
K8w0I4ZjV3v4LPahyopxrTs=
=J6ug
-----END PGP SIGNATURE-----

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to