Re: [Clamav-users] Problem with big mails

2007-03-30 Thread samir
I've set the limit of scanned mails to 2MB and it helped a little. I've figured I could tweak my postfix to take a bit longer to allow ClamAV to pass the mails through: lmtp_xforward_timeout = 1000s smtp_xforward_timeout = 1000s smtpd_timeout = 1000s I'll try this combo for a while, to see if it

RE: [Clamav-users] Problem with big mails

2007-03-29 Thread CPTeam Hostmaster
> >> Virus-scanning anything bigger than 1-2Mb makes little sense. > >> ANything > >> as big as 20Mb, I would just skip without further consideration. > > > > Nowadays it is not unusual to find malware samples exceeding that > > 2MB size limit. > > It's certainly possible for a large Word/Exc

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Maurice Lucas
> Chuck Swiger wrote: > > It's certainly possible for a large Word/Excel/whatever file to be > > infected, but they aren't very common. Out of the 400+ viruses > > quarantined over the past week or so on one of my mail servers, the > > average size was 11KB, and the largest malicious email was

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Michael Brown
I have to agree, in the technical sense that if you allow larger attachments it really starts to sap the resources. I originally allowed 400MB attachment scanning and it would really load down the server at times. I set it back to default setting of 10MB and resource usage was much better. I fi

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Julio Canto
Chuck Swiger wrote: > It's certainly possible for a large Word/Excel/whatever file to be > infected, but they aren't very common. Out of the 400+ viruses > quarantined over the past week or so on one of my mail servers, the > average size was 11KB, and the largest malicious email was 116KB (it > c

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Chuck Swiger
On Mar 29, 2007, at 12:03 PM, Julio Canto wrote: Per Jessen wrote: Virus-scanning anything bigger than 1-2Mb makes little sense. ANything as big as 20Mb, I would just skip without further consideration. Nowadays it is not unusual to find malware samples exceeding that 2MB size limit. It

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Julio Canto
Per Jessen wrote: > Virus-scanning anything bigger than 1-2Mb makes little sense. ANything > as big as 20Mb, I would just skip without further consideration. > Nowadays it is not unusual to find malware samples exceeding that 2MB size limit. -- Regards, Julio Canto | VirusTotal.com | Hispase

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Per Jessen
[EMAIL PROTECTED] wrote: > Hey all; > I'm running ClamAV 0.90.1 on FreeBSD 6.2. > In front of this server I have 3 other, which gather traffic and run > it through my ClamAV-server. > > Everything is running smothly, except some mails, that are large. > Right now I have 4 mails on one of the serv

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Chuck Swiger
On Mar 29, 2007, at 7:03 AM, [EMAIL PROTECTED] wrote: I'm running ClamAV 0.90.1 on FreeBSD 6.2. In front of this server I have 3 other, which gather traffic and run it through my ClamAV-server. Everything is running smothly, except some mails, that are large. Right now I have 4 mails on one

[Clamav-users] Problem with big mails

2007-03-29 Thread samir
Hey all; I'm running ClamAV 0.90.1 on FreeBSD 6.2. In front of this server I have 3 other, which gather traffic and run it through my ClamAV-server. Everything is running smothly, except some mails, that are large. Right now I have 4 mails on one of the servers that vary in size from 20MB to 60 MB