On Mon, Jun 18, 2007 at 09:39:23AM -0400, Christopher X. Candreva wrote:
> On Mon, 18 Jun 2007, Peter Boosten wrote:
> 
> > I had some problems running clamd on one of the machines a long time
> > ago, and with mimedefang running clamscan is the second option (which
> > had worked until sometime ago). So I configured mimedefang for clamscan.
> 
> Maybe it's time to ask the mimedefang people to either remove the clamscam 
> option, or put a big "NOT FOR PRODUCTION - FOR TESTING ONLY" on it.

clamscan has a purpose. As others have also said - YMMV. A very lightly
loaded mailserver (~100 msgs/day) shouldn't have a lot of problems with
clamscan. At least not with the 0.88.x version.

Besides, mimedefang uses clamscan in case a zip file comes in that clamd
is unable to scan, because it is packed with the deflate64 method, which
clamd cannot handle. In that case "clamscan --unzip" is called to scan
the file again (at least - clam cannot handle deflate64 up until at least
0.90.3, I haven't checked 0.91rc1 yet).

So for anyone upgrading clamav from 0.88.7 to 0.90, the sudden massive
drop in performance (about 50% slower scan times, 10-20 times slower
startup times for clamd and clamscan) would come as a surprise. The
release notes of the 0.90 version of clamav unfortunately fail to
mention that performance problem.

(To be fair - the scan times have been fixed since 0.90.2 (or 0.90.3 for
some platforms), and the startup time appears to be fixed in 0.91rc1.
Kudos to the delopers for recognising one of the roots of all evil).

So I don't think it's mimedefang that should label the clamscan
method as "not for production use".

-- 
Jan-Pieter Cornet <[EMAIL PROTECTED]>
!! Disclamer: The addressee of this email is not the intended recipient. !!
!! This is only a test of the echelon and data retention systems. Please !!
!! archive this message indefinitely to allow verification of the logs.  !!
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to