Steve Holdoway wrote: > Hi Jason, good to know other locals're on the list. > > > On Tue, 10 Feb 2009 16:10:34 +1300 > Jason Haar <jason.h...@trimble.co.nz> wrote: > >> Steve Holdoway wrote: >>> As per title, it works, but it's just so slow... I've got a quad core xeon, >>> 2GB and loads of disk space available. Can anyone point me to any resources >>> to help me get the best out of the server - google's not helping ): >>> >> Err - you don't actually say anything. What does "squid + clamd" mean? > running squid and clamd to provide a cleaned feed for html traffic. >> How many users? The hardware you mention would be brilliant for a >> 10-user network with a 1Mbs link, but would be atrocious for a >> million-user network. I'd guess you are somewhere in between - but you >> don't say. > html traffic isn't large. It's a company smaller than yours. >> >> >> -- >> Cheers >> >> Jason Haar >> Information Security Manager, Trimble Navigation Ltd. >> Phone: +64 3 9635 377 Fax: +64 3 9635 417 >> PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 >> >> _______________________________________________ >> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net >> http://www.clamav.net/support/ml > > I posted on this list as it seems that the clamd side is the bottleneck, and > as I have only used clamav from a milter until now, I'm unfamiliar with > performance tuning clamd (: > > Do you have any info, or pointers? I think people here want more information than the fact that your are using ClamAV because there could be other bottlenecks. For instance, I thought I recently heard mention of squidclamav on this list.
When I tried squidclamav, downloads timed out because of how it works. Squidclamav uses curl to download files, scan them, and then the proxy also downloads the file a second time. This slowed down browsing through my proxy server to the point that it was unusable; I gave up on squidclamav at the time because it only acted as a squid ``redirector'', not a filter. I am not aware of any other ways to integrate clamav and squid, but there must be some solutions that allow squid to download the file, have clamav scan it, and then decide whether or not to throw out the file. I can give no other information as I don't scan my http traffic at all. > > Cheers, > > > Steve.
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
