On Thu, Jun 29, 2006 at 08:57:43AM -0500, Steve Brown said:
> >At any rate, I'm running without a softlimit right now so we will see
> >what happens.  Other avenues to persue would be helpful.
> 
> Well, I've been running clamd for the last few days without softlimits
> and have had no problems with it choking.  I've reviewed the logs and
> see several messages where the max file size was hit, but it didn't
> die so that's a good sign.  So now I have a few more questions:
> 
> 1) For those of you who are using softlimits or ulimits, what are
> you're limits set to?  It still makes me nervous, so I'd like to add
> the limits back at some point.

I'm not doing anything clever here, so I won't answer this bit.

> 2) I've been monitoring the clamd process with top and it never seems
> to take more than about 30Mb of total memory (physical + virtual), so
> I'm curious why it would be choking with a softlimit of 50Mb.
> Thoughts?

The 30MB you see is the idle memory usage.  When it is actually
scanning something, it recursively mmap's it, so it can get quite large.
This may be a bug, it may be a feature - my jury is undecided.  But it
does not surprise me that sometimes clamav needs more than 20 MB to deal
with a multipart mime message.

> 3) Are other mail admins out there seeing these huge file attachments
> coming in?  Most of them seem to be spam, so I'm guessing a few folks
> are.  I'm sure I could find this in the docs, but being a little lazy
> right now, what does clamd do when it reaches the max file size?  What
> do other clamd users have your max file size set to?

I limit the message size limit in the MTA.  I see no point in unduly
stressing clamav when I have already guessed that this is junk mail I'm
not interested in receiving (that's the royal I, at least for the domains
I am the mail admin for).
-- 
 --------------------------------------------------------------------------
|  Stephen Gran                  | Delta: We're Amtrak with wings.    --   |
|  [EMAIL PROTECTED]             | David Letterman                         |
|  http://www.lobefin.net/~steve |                                         |
 --------------------------------------------------------------------------

Attachment: signature.asc
Description: Digital signature

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to