[EMAIL PROTECTED] wrote:
> in qmail-scanner-queue.pl ,I put a patch that
>   count the number of processes of qscand user
> and decide to avoid antivirus antispam processing
> if there are already too many processes.
> It is yours to decide how many is too many.
>
> Ok, this is bad : it can let go some spams and virus through.
> But it avoids freezing the system by process overloading.
> I use this patch since one year.
Yes - that is bad. Qmail-Scanner is *by designed* designed to fail as a
"temporary failure" whenever anything goes unexpectedly wrong. You patch
changes that completely into a "fail open" mode.

I also don't see why you need this. If your system is too low powered to
handle the sorts of load you are seeing, then you really should change
the resources allocated to Qmail. ie. reduce the max number of
simultaneous qmail-smtpd processes your system will run. If a spammer
tries to send you 10,000,000 spam messages at the same moment in time,
and your concurrenysmtpd limit is set to 10 - then only a max on 10
Qmail-Scanner processes will be started.

However, if your problem is actually with how long some sub-process
(typically SpamAssassin) spawned by Qmail-Scanner takes, then I can see
some point. As anti-spam measures are "slightly" less important than
antivirus, maybe some form of quicker timeout on SA would be a good
thing. It would be nice if we could invoke spamc with some
"--max-timeout=4sec" type option.

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Qmail-scanner-general mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to