David F. Skoll wrote: > Hello, > > A client of ours had a bunch of machines whose CPUs were maxed out > at 100% because of clam. Changing PhishingScanURLs to "no" from the > default "yes" dropped the load average from 70+ to about 3, and the > CPU usage from 100% to under 50%. This is under Linux, so it's not > the broken Solaris regex library at fault. > > I have two questions, a practical one and a philosophical one: > > The practical one: Do others observe the very poor behaviour > of PhishingScanURLs? Is it perhaps hitting pathological cases of regex > evaluation? > > The philosophical one: Do heuristics like PhishingScanURLs belong in a > virus scanner? I realize that once the engine is in place, it's > tempting to add features, but I'm not convinced such things belong in > a virus scanner. I think they are more in the domain of anti-spam > software, especially since it's good for security to keep your > virus-scanner small, fast and secure and do more complex text analysis > in a language other than C. I guess I would vote for PhishingScanURLs > to be "no" by default rather than "yes". > > Regards, > > David. > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://lurker.clamav.net/list/clamav-users.html > > For what it is worth, Linux will only forge ahead in the market by > improvements in 2 areas. One of them is security. I would like to see 1 > security suite which has the capability to deal with ALL threats. Windows > security has to have an anti virus, anti trojan, adware and malware > protection, an anti browser hijacker, a rootkit checker, a secure firewall, > and these are all separate programs. Pardon me if I missed one out. When > Linux guarantees protection from all these threats in 1 package, then one > major hurdle holding back a greater uptake of Linux will have been removed. Joe Clements (joeclem111)
_______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
