They could make a difference too . By the way If I force clamd configuration settings (checking big attachments , checking deeper archive files , checking local users ) my old server simply goes near to crash . These settings were a forced solution for me.
my daily sar reports this Average: all 12.94 0.00 6.05 0.96 80.05 80.05% idle medium It's a very good value considering my old celeron box . When I was running spamassasin with clamd server wide , I had a value under 50% and several users were reporting problem sending email . I am always talking about of this old machine OS Centos 4 , running cpanel pentium IV celeron 1.8 Ghz , 1 GB ram with about 120 users It's an hosting server so it run also Apache , php , mysql , perl , python .... > Graziano, > > Do you find that changes to other configuration sections of ASSP make a > difference (ex: RBL, SRS, etc....)? Or just when you change the > configuration values of ClamAV/ASSP ClamAV section? > > Thanks, > > Eric > > "Graziano" <[EMAIL PROTECTED]> wrote in message > news:[EMAIL PROTECTED] > >> Hello >> >> I have NO problem running clamd with following (strict) configurations >> >> FixStaleSocket >> ScanMail >> LocalSocket /var/clamd >> MaxConnectionQueueLength 12 >> StreamMaxLength 1M >> MaxThreads 5 >> ReadTimeout 60 >> IdleTimeout 20 >> MaxDirectoryRecursion 2 >> SelfCheck 3600 >> ScanPE >> ScanOLE2 >> ScanMail >> ScanHTML >> ScanArchive >> ArchiveMaxFileSize 1M >> ArchiveMaxRecursion 1 >> ArchiveMaxFiles 50 >> ArchiveMaxCompressionRatio 0 >> ArchiveLimitMemoryUsage >> >> and with asp configured as follow >> ####################################################### >> >> >> External Attachment Blocking >> 1 >> Whitelisted & Local Attachment Blocking >> 0 >> >> NoProcessing Attachment Blocking >> 1 >> >> Level 4 Allowed File Extensions >> doc|xls|ppt|pdf|zip|rtf|txt >> >> Level 1 Blocked File Extensions >> exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|cmd|com|ht[ab] >> >> >> Level 2 Blocked File Extensions >> empty >> >> Level 3 Blocked File Extensions >> zip >> >> Use Av Clamd >> checked >> >> >> Port or file socket for local Av Clamd >> /var/clamd >> >> >> Size of buffer for Av Clamd >> 512 >> >> Check local email by Av Clamd >> UNCHECKED >> >> AV Bytes >> 10000 >> =================================================================== >> =================================================================== >> >> Using this strict settings above I have no problem also on very old >> servers . >> >> Using above conf on an old pentium IV celeron I have this stat >> 44 virus detected with 7 days working and 57747 messages processed . >> >> If I use a less strict configuration , I have serious problem too. >> With current configuration , 0 problems. >> >> Talking about cpu usage I have read good things about Mail::ClamAV >> http://search.cpan.org/~sabeck/Mail-ClamAV-0.17/ClamAV.pm >> assp uses instead File::Scan::ClamAV , I don't know which is better . >> >> Graziano >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >>> On 06/12/2006, at 6:12 PM, Eric B. wrote: >>> >>> >>> >>>>> Every now and then I notice that there are no new entries in ASSP's >>>>> log. Looking at Activity Monitor I notice that clamd and kernel_task >>>>> are both running at about 57% of CPU. kernel_task usually runs at >>>>> less than 1%. >>>>> >>>>> As soon as I quit clamd, mail starts flowing flowing through ASSP >>>>> (after it realises that it can't connect to the socket). clamd.log >>>>> doesn't say anything, - the last entries say "SelfCheck: Database >>>>> status OK". >>>>> >>>>> >>>> If you are running ClamAV integrated with ASSP, then yes - several >>>> users >>>> have already reported that this is a significant slowdown for ASSP, >>>> and >>>> everyone has recommended putting it outside ASSP. Either on the >>>> MTA itself, >>>> or a intermediate MTA that does nothing but AV & relaying between >>>> ASSP and >>>> your actual MTA. I'm not entirely sure where the slowdown is, but >>>> likely >>>> something related to the fact that ASSP is single threaded. >>>> >>>> Eric >>>> >>>> >>> Yes I am running ClamAV integrated with ASSP. If, as you suggest, it >>> is something to do with integration of ASSP with ClamAV, not ClamAV >>> itself, then I will go back to using ClamSMTP. >>> >>> Thanks Eric, >>> >>> James. >>> >>> ------------------------------------------------------------------------- >>> Take Surveys. Earn Cash. Influence the Future of IT >>> Join SourceForge.net's Techsay panel and you'll get the chance to share >>> your >>> opinions on IT & business topics through brief surveys - and earn cash >>> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >>> _______________________________________________ >>> Assp-user mailing list >>> Assp-user@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/assp-user >>> >>> >>> >> ------------------------------------------------------------------------- >> Take Surveys. Earn Cash. Influence the Future of IT >> Join SourceForge.net's Techsay panel and you'll get the chance to share >> your >> opinions on IT & business topics through brief surveys - and earn cash >> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >> > > > > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share your > opinions on IT & business topics through brief surveys - and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > Assp-user mailing list > Assp-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-user > > ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
