Michael D. Crawford wrote:
Recall that I was asking the list recently how to deal
with getting 400 MB a day of the zafi.b virus in my
mailbox.  I can filter out my mailbox with a procmail
script, followed by using clamscan and procmail, but
my hosting service isn't yet able to do it for me.

It turns out that they had clamav working in their
email processor for a little while, but had to disable
it because it used so much CPU time that the host
wasn't able to keep up with its load.  Ironically, I
think that was likely the case because the hosting
service is getting spammed with so many viruses.

Is there a way to filter out the most obvious viruses
without using very much CPU time, so that the
processing required to scan all the remaining messages
with clamav wouldn't be so great?


Your hosting service needs to buy a cheap, fast PC with Linux, or a Unix system, install only clamav on it, and take that load off critical email servers. I run 5 mail servers through a single Sun E-250 dual proc server (very cheap after market/Ebay) running clamav and with loads far greater than your 400mb/day. It is more than capable of handling the load and will scale for some time. Sun Netra servers (1u size) can also do the job and are also very inexpensive.


Putting the filtering on a stand-alone system made a HUGE difference for me.

dp


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to