-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 1/31/2013 1:40 PM, Thomas Leuxner wrote: > * Noel Jones <njo...@megan.vbhcs.org> 2013.01.31 18:23: > >> Other than the obvious? > > That is a tad bit vague. When I looked at the milter some > (long) time ago, it was far less intuitive than a dedicated > SMTP interface. It also gave very little to no messages > indicating it actually processed mail. I went with clamsmtp at > that time which never failed me and ran without any hiccups > happily ever after. It even provides the ability to trigger > event driven actions - whether you need that feature or not. > I'm lacking background on milter interfaces vs. SMTP servers, > but my gut feeling is that the latter is far more scalable. > > Regards Thomas >
Mostly I was referring to mailscanner as having more third-party dependencies, but clamsmtp has the obvious dependency of itself, whereas clamav-milter is included with & maintained by the clamav team. The postfix <> milter interface is dirt-simple to set up, and doesn't suffer from the double-hop performance penalty of a proxy. That said, I expect real-world performance to be close enough that it's not a deciding factor. With milter, you also get the (questionable, but important to some folks) ability to specify a default action when the back end breaks. http://www.postfix.org/postconf.5.html#milter_default_action You're right that clamav-milter doesn't spam your logs with unnecessary "Still working! Clean mail!" messages; that's probably a good thing. You can always turn on debugging during install/testing to see if it's really working. The clamav-milter is also not particularly flexible. Its "virus" actions are limited to "reject" or "quarantine" (hold), globally configured. When I need something more flexible, I prefer amavisd-new, which is high-performance, high-reliability, very flexible, and can be used as a proxy or milter. I think that's enough on this subject. -- Noel Jones -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJRCtPbAAoJEJGRUHb5Oh6guFYH/RPohx0DYo72o3LuucngVSiD ijTtlz73t6nKF9J8AF/r8Ck3bMzcRJgTtAuAbCbTTuDUb9K7oTpztlUs1qfhZ8iB JD2ucZZmRXHOGsKbTXO8qyXOqfHQJQOKpn56WJ0DpFb8QfbztOfPXJyOeGrVC4/g KfBKK6szz0RiKJ2oK1rzKbFvruywOYiw2bRzECaIoGrzj0Fu3w/zZ0WrRPMMFh/X yp2bclAUU9IqslZPJ1WxbkPWbQWhbcXdoP34Zb5ZA2m+jX+pZ9JpdxoFhAQIv2Du jsghgUSgqr+1GV/WnQAzIr9LDp4Uw0KkTdWS/ItrRnNk0MjKUAmvrJUoaHSjMkU= =eBXU -----END PGP SIGNATURE-----