Hi there, On Mon, 1 Nov 2021, Robert M. Stockmann via clamav-users wrote:
... If ... system invokes a perl based tool, anything can happen. ...
Er, if you let it. :) I run a couple of Perl milters which do the heavy lifting for our mail filtering. One of them _is_ pretty heavy but I only allow five copies of it to run at any one time; the other is much lighter and at present the limit is set to 63 concurrent copies. That's within the confines of any one mail server, each of which has 750 Mbytes RAM and runs on less than ten watts. The mail servers use a separate (single) clamd server for all the scanning that they need to do (the ClamAV official signatures, plus a truckload of third party signatures and a few dozen custom Yara rules). My milters shoulder most of the filtering burden, and from what's left after that the vast majority of scanner hits is produced by the Yara rules. All of this is well within the processing capacity of the typical modern laptop, by which I mean that IMHO mail processing doesn't *have* to use a Core i9 and 16 gigabytes of RAM. After all, we were doing it in the 1970s. Or at least I was. :( -- 73, Ged. _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
