Jeff Wark wrote:
We have recently gotten the CommuniGate Cluster [2 front-ends/2 back ends] and I am currently testing clamav on it.I use clamav + cgpav on frontends only. Backends only process direct traffic for webmail, so I save some CPU load
by not installing it there. Consequently, my cgpav rules are serverwide, not clusterwide.
We don't get your level of mail [maybe about 1/2 I think ~20000/hour at the upper end]. I only installed clamav last Thursday so I don't have a lot of background info on it.
Mine is about 30000/hour, and it's running OK now.
After two day of running, the one server that gets more mail [larger domains directed at it and it seems to come in waves] was having trouble. The clamd process was taking up a lot of CPU time [usually sits below 2% but was up in the 70% range].
Add clamdwatch.pl (see contrib directory) to your crontab. It helps.
I didn't have any limits on message sizes in my rules and I think it was being overloaded with tonnes of spam email of minimal size while at the same time trying to scan a few larger emails.
I currently have it set to check messages that are over 3K in size and it seems to help, but I have noticed it bogging down a couple times since with the following showing up in the CommuniGate Logs:
If anyone knows the upper and lower limits on message size that will probably/most likely contain viruses, that may be helpful. Can you get viruses that are in 5K messages? How many viruses are transmitted in 5MB messages?Not much additional info here, but I scan anything under 1MB.
I also turn off all kinds of rejects and bounces when a *worm* virus is detected.
Regards,
Fajar -- Please avoid sending me Microsoft Office attachments. See http://www.newsforge.com/software/04/03/27/0134204.shtml
------------------------------------------------------- This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
