Hi Marga,
(cc PLUG)
On Tue, Oct 01, 2002 at 03:26:14PM -0400, Marga Adan wrote:
> I hope you can help me.
Sure, but I prefer that message like this be routed through either PLUG
or the PH Linux Newbie list, instead. Aside from my personal preference,
you also have the wider audience there, which normally means more input
from the community.
> I've been following the PLUG on referral by persons I've met , and
> appreciate very much if you can provide some insight on below:
>
> I found the Linux mail server posted that the amavis process was
> killed due to low memory resources. Fortunately, amavis re-activates
> itself if the process was killed. When checking memory usage, I found
> out that vscan was hogging much of the cpu state and the memory state.
>
> I have not much experience on linux, but would you know how the
> performance of AMAVIS (degrades/ remains ok)is when used with a
> virus scanner?
>From personal experience I've found the killer is not as much AMaViS per
se, as it is the virus scanner that AMaViS spawns for each and every
message that passes through the mail server. I am using McAfee uvscan
and have noticed that on top of the standard overhead involved in
loading a new process, it does an unexplainable modprobe, scanning all
available modules that takes quite awhile.
Other than that the load is still bearable with a server like ours[1].
For MTAs that handle a lot of traffic you may be interested in skipping
the middle-layer of AMaViS entirely, though. You can opt to use a virus
scanner that runs as a daemon and interfaces directly with the MTA. An
example of this is Kaspersky Labs AV. Unfortunately those are
significantly more expensive than your standard "file-sweeping" type
anti-virus which AMaViS (and the like) "glue" to your MTA.
[1] To see our MTA load graphs see
(http://mrtg.leathercollection.ph/mailgraph.cgi)
--> Jijo
--
Federico Sevilla III : http://jijo.free.net.ph
Network Administrator : The Leather Collection, Inc.
GnuPG Key ID : 0x93B746BE
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
