I have been using qmail-scanner for a long time but mainly on my mail
server at home and other friends servers. My current server only has a
few thousand email a day. I have been nervous to implement qmail-scanner
in an ISP environment because of the load of starting up perl for every
email.

Anyway, to cut a long story short, I took the plunge and installed it on
the 2 load-balanced qmail servers at work (ISP). It is running
absolutely flawlessly. My doubts were unfounded.:-)

During "low periods" each mail server has about 70% free CPU capacity
and this drops to about 40% during peak times. I had to switch off the
logging options because the logs get very big very quickly. Using debug
is not even an option :-)

I am running trophie for the actual virus scanning and here are the
stats extracted from /var/spool/qmailscan/viruses.log. Notice the dates,
this is for a day and a half.

31/05/2002 13:57:02  ->  02/06/2002 07:26:55

  JS_NOCLOSE.E = 2
  PE_NIMDA.E = 1
  JS_NIMDA.A = 2
  PE_Magistr.B.Dam = 1
  WORM_GIBE.DR = 1
  BKDR_SUB7.21.A = 1
  WORM_BADTRANS.B = 4
  JS_EXCEPTION.L = 1
  JOKE_32 = 1
  PE_KRIZ.4050 = 1
  JS_KAKWORM.C = 1
  JOKE_SCROLL.A = 2
  JS_KAKWORM.A = 3
  WORM_GONER.A = 1
  W97M_GROOVIE = 1
  WORM_CERVIVEC.A = 1
  W97M_HARKONE = 1
  TROJ_NETBUS.BR = 3
  JOKE_MIRACLE.A = 2
  W97M_THUS.C = 2
  WORM_YAHA.A = 9
  PE_Mtx.A = 9
  PE_CIH.1003 = 25
  PE_Magistr.B = 62
  WORM_HYBRIS.D = 87
  WORM_HYBRIS.B = 95
  PE_Magistr.A = 97
  WORM_KLEZ.E = 208
  WORM_SIRCAM.A = 326
  Illegal MIME characters found in headers = 1233
  WORM_HYBRIS.M = 1157
  WORM_KLEZ.H = 30288


--
Greg



_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to