Em Qui, 2006-02-02 às 12:00 -0500, [EMAIL PROTECTED]
escreveu:

> ------------------------------
> 
> Message: 14
> Date: Thu, 02 Feb 2006 11:37:00 -0500
> From: James Kosin <[EMAIL PROTECTED]>
> Subject: Re: [Clamav-users] 100% CPU  clamav samba-vscan thunderbird
> To: ClamAV users ML <clamav-users@lists.clamav.net>
> Message-ID: <[EMAIL PROTECTED]>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Paulo Ricardo Bruck wrote:
> > Hi guys
> > 
> > environment:
> > 
> > Debian Sarge 3.1
> > samba3.0.14a-3sarge
> > clamav-daemon  0.88-0volatile
> > vscan-samba 3.0.6b
> > 
> > When I test w/ eicar w/samba or w/ clamscan it works like a charm, but
> > when I tried to look at thunderbird mail at [ home] in samba, CPU
> > increase till 100%. 
> > This problem only occurs when any user tries to read/receive an email.
> > 
> > Any clues about it? Am I asking at the right list?
> > 
> > openantivir list is out......
> > 
> > thanks in advance
> 
> Hi,
> 
> This is probably because of your settings for vscan-samba.
> Here are my settings, although you may have to tweak things to get
> performance up.
> 
> You could also try setting one of the 'scan on open' / 'close' flags to
> no to see if that suites your needs.
> 
> - --- in samba-vscan.conf ---
> 
> max file size = 8388608         ; 8M
> 
> - ----------------------------
> 
> You could also try the 0.40 snapshot for samba-vscan-clamav.  I have a
> copy in my RPM.
> http://support.intcomgrp.com/mirror/fedora-core/beta/src/samba-vscan-clamav-0.4.0-2.fc1.src.rpm
> 
> You probably are using IMAP or a huge inbox, try the max file size limit
> first.
> 
no only using pop for users and all mailboxes are under 10Mb....


> Let me know,
> James Kosin
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFD4jUskNLDmnu1kSkRAhz7AJoCOVM4rLQniso8mKhNGnFehgnzJgCeOry+
> 9j6P1AhPNpPtAmolf0ikpX0=
> =4pWV
> -----END PGP SIGNATURE-----
> -- 
> Scanned by ClamAV - http://www.clamav.net
> 
> 


Hi James 


Following your tips. I still have the same problem. Users trying to see
mail by thunderbird takes 100% of CPU.

if helps here my vscan.conf
------------------------------------------------------------------
samba-vscan]
      
      max file size = 10485760
      verbose file logging = yes
      scan on open = no
      scan on close = yes
      deny access on error = yes
      deny access on minor error = no
      send warning message = yes
      infected file action = quarantine
      quarantine directory  = /var/log/virus-quarantine
      quarantine prefix = vir-
      max lru files entries = 100
      lru file entry lifetime = 5
      exclude file types =
      clamd socket name = /var/run/clamav/clamd.ctl
      libclamav max files in archive = 1000
      libclamav max archived file size = 10485760
      libclamav max recursion level = 5
------------------------------------------------------------------



-- 
Paulo Ricardo Bruck - consultor

Attachment: signature.asc
Description: Esta é uma parte de mensagem assinada digitalmente

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to