Re: [clamav-users] [sanesecurity] Re: Long DB refresh times

2012-04-26 Thread Jerry
On Thu, 26 Apr 2012 21:18:41 +0300 Török Edwin articulated: {snip} >Its a bit more complicated than that. To ensure fast pattern-matching >the signatures are loaded into an Aho-Corasick trie for example. It >would be possible to add to the trie (thats what happens when loading >signatures), but r

Re: [clamav-users] [sanesecurity] Re: Long DB refresh ti

2012-04-26 Thread Pierre Dehaen
On 26 Apr 2012 at 21:18, Török Edwin wrote: > On 04/26/2012 08:37 PM, Michael Orlitzky wrote: > > On 04/26/2012 10:32 AM, Dennis Peterson wrote: > >> On 4/25/12 7:34 AM, Michael Orlitzky wrote: > >>> On 04/25/12 07:55, Török Edwin wrote: > > > > I don't know if this can help speeding up th

Re: [clamav-users] [sanesecurity] Re: Long DB refresh times

2012-04-26 Thread Török Edwin
On 04/26/2012 08:37 PM, Michael Orlitzky wrote: > On 04/26/2012 10:32 AM, Dennis Peterson wrote: >> On 4/25/12 7:34 AM, Michael Orlitzky wrote: >>> On 04/25/12 07:55, Török Edwin wrote: > > I don't know if this can help speeding up the process but I collected > some statistics on >

Re: [clamav-users] [sanesecurity] Re: Long DB refresh times

2012-04-26 Thread Michael Orlitzky
On 04/26/2012 10:32 AM, Dennis Peterson wrote: > On 4/25/12 7:34 AM, Michael Orlitzky wrote: >> On 04/25/12 07:55, Török Edwin wrote: I don't know if this can help speeding up the process but I collected some statistics on clamscan of a small file (wallclock duration: ~25sec):

Re: [clamav-users] How can I whitelist certain sender with clamav-milter

2012-04-26 Thread aCaB
On 04/26/12 14:53, Gary Yao wrote: > is there a way I can tell postfix to whitelist this sender? Gary, I don't know about Postfix but you can do some whitelisting in the milter. There is a dedicated "Exclusions" section in its config file[*]. You may want to give a look at it. Cheers, -- aCaB [*

Re: [clamav-users] How can I whitelist certain sender with clamav-milter

2012-04-26 Thread gene heskett
On Thursday, April 26, 2012 10:52:25 AM Gary Yao did opine: > Hi > > I am new to clamav, and inherited a postfix+clamav+spamassassin setup. > > Now I have a user's certain email got rejected. In maillog, it indicates > that they were detected as "Virus detected:Phishing.DblDom-83". I knew > this

Re: [clamav-users] [sanesecurity] Re: Long DB refresh times

2012-04-26 Thread Dennis Peterson
On 4/25/12 7:34 AM, Michael Orlitzky wrote: On 04/25/12 07:55, Török Edwin wrote: I don't know if this can help speeding up the process but I collected some statistics on clamscan of a small file (wallclock duration: ~25sec): I think I'm missing some context here: which DB files are slow to

Re: [clamav-users] How can I whitelist certain sender with clamav-milter

2012-04-26 Thread Jerry
On Thu, 26 Apr 2012 22:53:25 +1000 Gary Yao articulated: >I am new to clamav, and inherited a postfix+clamav+spamassassin setup. > >Now I have a user's certain email got rejected. In maillog, it >indicates that they were detected as "Virus >detected:Phishing.DblDom-83". I knew this user was sendin

[clamav-users] How can I whitelist certain sender with clamav-milter

2012-04-26 Thread Gary Yao
Hi I am new to clamav, and inherited a postfix+clamav+spamassassin setup. Now I have a user's certain email got rejected. In maillog, it indicates that they were detected as "Virus detected:Phishing.DblDom-83". I knew this user was sending legitimated emails, is there a way I can tell postfix to