hi guys,
I am having troubles with clamav and nested MIME mails. It seems than
clamav hangs for 60 sec whenever it receives a mail (~1MB) with many nested
MIME mails in it.
I have tried setting the MailMaxRecursion all the way down to 1, but it
still fails, it neither recognize it as a virus, nor it passes it through
(my ArchiveBlockMax is commented out). When this happens it raises my CPU
load to ~5-9, so it is an issue for me.
I managed to temporarily solve this problem by setting StreamMaxLength
and ArchiveMaxFileSize to 800K but that is not a real solution.
Is this a common behavior, and how can i limit the time it spends on
resolving that kind of mails.
I have seen a about the stack overflow, and it states that the bug is
resolved in the 0.88.7. My clamd and freshclam are updated to the latest
version, ClamAV 0.88.7/2354/Mon Dec 18 09:50:31 2006, and i still have this
problem
Best regards, Zoran
P.S. Here is my clamd.conf file
TCPSocket 3310
TCPAddr x.x.x.x
User clamav
AllowSupplementaryGroups
ScanMail
ScanArchive
ArchiveMaxRecursion 2
ArchiveMaxFiles 1000
ArchiveMaxFileSize 10M
ArchiveMaxCompressionRatio 250
ScanRAR
MaxDirectoryRecursion 5
ReadTimeout 120
MaxThreads 20
MaxConnectionQueueLength 30
StreamMaxLength 10M
LogFile /var/log/clamav/clamav.log
LogTime
LogFileMaxSize 0
PidFile /var/run/clamav/clamd.pid
DatabaseDirectory /var/lib/clamav
SelfCheck 3600
ScanOLE2
ScanPE
#DetectBrokenExecutables
ScanHTML
#ArchiveBlockMax
StreamMinPort 3300
StreamMaxPort 3320
#MailMaxRecursion 1
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
