-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 1/31/2013 1:40 PM, Thomas Leuxner wrote:
> * Noel Jones <njo...@megan.vbhcs.org> 2013.01.31 18:23:
> 
>> Other than the obvious?
> 
> That is a tad bit vague. When I looked at the milter some
> (long) time ago, it was far less intuitive than a dedicated
> SMTP interface. It also gave very little to no messages
> indicating it actually processed mail. I went with clamsmtp at
> that time which never failed me and ran without any hiccups
> happily ever after. It even provides the ability to trigger
> event driven actions - whether you need that feature or not.
> I'm lacking background on milter interfaces vs. SMTP servers,
> but my gut feeling is that the latter is far more scalable.
> 
> Regards Thomas
> 

Mostly I was referring to mailscanner as having more third-party
dependencies, but clamsmtp has the obvious dependency of itself,
whereas clamav-milter is included with & maintained by the clamav
team.

The postfix <> milter interface is dirt-simple to set up, and
doesn't suffer from the double-hop performance penalty of a proxy.
 That said, I expect real-world performance to be close enough
that it's not a deciding factor.

With milter, you also get the (questionable, but important to some
folks) ability to specify a default action when the back end breaks.
http://www.postfix.org/postconf.5.html#milter_default_action

You're right that clamav-milter doesn't spam your logs with
unnecessary "Still working! Clean mail!" messages; that's probably
a good thing.  You can always turn on debugging during
install/testing to see if it's really working.

The clamav-milter is also not particularly flexible. Its "virus"
actions are limited to "reject" or "quarantine" (hold), globally
configured.
When I need something more flexible, I prefer amavisd-new, which
is high-performance, high-reliability, very flexible, and can be
used as a proxy or milter.

I think that's enough on this subject.


  -- Noel Jones
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJRCtPbAAoJEJGRUHb5Oh6guFYH/RPohx0DYo72o3LuucngVSiD
ijTtlz73t6nKF9J8AF/r8Ck3bMzcRJgTtAuAbCbTTuDUb9K7oTpztlUs1qfhZ8iB
JD2ucZZmRXHOGsKbTXO8qyXOqfHQJQOKpn56WJ0DpFb8QfbztOfPXJyOeGrVC4/g
KfBKK6szz0RiKJ2oK1rzKbFvruywOYiw2bRzECaIoGrzj0Fu3w/zZ0WrRPMMFh/X
yp2bclAUU9IqslZPJ1WxbkPWbQWhbcXdoP34Zb5ZA2m+jX+pZ9JpdxoFhAQIv2Du
jsghgUSgqr+1GV/WnQAzIr9LDp4Uw0KkTdWS/ItrRnNk0MjKUAmvrJUoaHSjMkU=
=eBXU
-----END PGP SIGNATURE-----

Reply via email to