On 3/16/10 2:38 PM, Nathan Gibbs wrote:
* Steve Holdoway wrote:
On Sat, 2010-03-13 at 08:25 -0500, Nathan Gibbs wrote:
I get those errors with these clamd settings
CommandReadTimeout 120
ReadTimeout 900
This is with the milter load balancing across 5 nodes.
Cheap, Fast,& Right, pick two.
Obviously, fast didn't get on the list.
Even with these scary options, I am still in the same boat ):
Those options are ridiculously generous.
What is scary is that I still get accept timeouts on the clamd ends.
In a load balanced setup.
With hardly any load to balance.
Based on what I see now, if we were flooded with email, I would not be
surprised to see our clamav setup completely fall over.
Speaking generally on the concept of load balancing: It isn't a clamd problem
and it's not a problem with Sendmail, but there may be an issue with clamav-milter.
My configuration for years has been Sendmail, J-Chkmail, and ClamAV. J-Chkmail
is an all-purpose milter that is the glue between Sendmail (or PostFix) and
clamd. And it is a workhorse in its own right. I've had this on 4 servers in
load sharing, round-robin, and point to point configurations. When Jose (he's
the J in J-Chkmail) added a greylisting daemon with tcp/ip socket it further
simplified things.
I currently sync (in real time) three (was four) servers to a central server.
One was in England, two are in Washington state, one is in Hawaii. These are
related to each other by MX records. Each site has a local milter (J-Chkmail)
and ClamAV installation, and in a pinch any can handle the load for the others
in a hard failure situation. Think of it as a clustered application suite.
These systems also share hosts.deny, access_db, J-Chkmail regex filters, user
lists, and policies. This helps keep the systems from creating NDR's that are
common with asymmetric MX partners.
It is all quite reliable and creates very little work for me. It is definitely
worth staying at it and working out the bugs.
dp
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
