Recall that I was asking the list recently how to deal with getting 400 MB a day of the zafi.b virus in my mailbox. I can filter out my mailbox with a procmail script, followed by using clamscan and procmail, but my hosting service isn't yet able to do it for me.
It turns out that they had clamav working in their email processor for a little while, but had to disable it because it used so much CPU time that the host wasn't able to keep up with its load. Ironically, I think that was likely the case because the hosting service is getting spammed with so many viruses.
Is there a way to filter out the most obvious viruses without using very much CPU time, so that the processing required to scan all the remaining messages with clamav wouldn't be so great?
Your hosting service needs to buy a cheap, fast PC with Linux, or a Unix system, install only clamav on it, and take that load off critical email servers. I run 5 mail servers through a single Sun E-250 dual proc server (very cheap after market/Ebay) running clamav and with loads far greater than your 400mb/day. It is more than capable of handling the load and will scale for some time. Sun Netra servers (1u size) can also do the job and are also very inexpensive.
Putting the filtering on a stand-alone system made a HUGE difference for me.
dp
-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users