On Sat, 03 Jul 2004 at 14:40:24 -0700, Michael D. Crawford wrote:
[...]
> It turns out that they had clamav working in their
> email processor for a little while, but had to disable
> it because it used so much CPU time that the host
> wasn't able to keep up with its load.

As it has been already written, clamscan uses more CPU than clamdscan.
So if they used clamscan (you haven't written it), they should start
using clamdscan and the problem will probably go away.

[...]
> Is there a way to filter out the most obvious viruses
> without using very much CPU time, so that the
> processing required to scan all the remaining messages
> with clamav wouldn't be so great?
> 
> I saw a note posted here recently about a program that
> would remove messages with certain attachment types
> without actually checking if there was a known virus. 
> Something like that should help, perhaps you could
> give me more details.  As an example, any message with
> an attachment whose filename ends in ".scr" (Windows
> screensaver) is almost certainly a virus.
[...]

Again: we know nothing about that server setup.

E.g. amavisd-new is able to block messages containing attachments with
unwanted extensions.
But, depending on MTA used, such simple filtering (of extensions,
subjects etc.) can be done in MTA itself, before reaching amavisd-new. I
think that you should get more details about their setup and then you
can search documentation and mailing lists of those particular programs.

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros.
 [EMAIL PROTECTED]   http://www.ClamAV.net/   A GPL virus scanner


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to