You can limit the number of calls to SA, it's a start option it has. when it reaches it's limit will queue all the other calls it gets.
Right now on a wbel, I have it limit SA and Clamav to nly allow 4 messages to be scanned at one time. This helps seens as my SA foot print is 78 megs :) -- Chris L. Franklin -- ----- Original Message ----- From: "Xmail" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, April 01, 2004 9:46 PM Subject: [xmail] Re: announce : XAV has been updated. > > Rob, > We tried the same things (modify the included ini file, modify the return > code in the xav.tab that is called by filters.out.tab and filters.in.tab) > On our server, when we try to use XAV. > 1) the temp directories under the xav tree never disappear. > 2) the xav.exe processes never end > 3) the emails end up at the destination with the virus still intact > > I would be interested in any resolution that gets worked out. > > Thanks > David > -----Original Message----- > From: Rob Arends [mailto:[EMAIL PROTECTED] > Sent: Thursday, April 01, 2004 7:34 PM > To: [EMAIL PROTECTED] > Subject: [xmail] Re: announce : XAV has been updated. > > I agree, the "you missed something" is not a good start. > > How hard can it be to take an existing working xav setup (as noted > 22/08/2003 version of exe) and replace the exe with a newer one. Also > verify and update if needed, the ini file for any new options. In the > latest xav.zip I also tried the new de-mime package included in the zip. I > even tried the supplied ini, with mods to paths only. > I checked the debug output of both xav and xmail. > > I can see xmail launch xav, I can see the xav launch uudeview & AVG, and > then return to xmail with RC=0. > > What would be useful is the debug of xav to output the actual RC that it got > from AVG, at the moment it only shows what it expects to get if there is a > virus. > > I have done this for each new version DOLIST has put out and each and every > version after 22/08/2003 fails to return anything other than RC=0. I have > then returned to the original xav.exe and re-tested, and the virus is found. > Most times I have not returned to the original ini, just left the updated > one in place, because there is nothing significant changed. > > As it seems that there are a few of us out here with problems with xav, > could you put out a version with more verbose logging. This will help to > identify where the problem is. > You are welcome to mail me off list and we can report back to the list when > there is a solution. > > Rob :-) > > PS. It would be nice to have a version number in your distro. > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of DOLIST Technical Center > Sent: Wednesday, 31 March 2004 7:48 PM > To: [EMAIL PROTECTED] > Subject: [xmail] Re: announce : XAV has been updated. > > Bonjour Rob, > > You should have missed something somewhere. We have more than 8000 message > in keep directory at this time since yesterday with this version, and last > recent worms with AVG are filtered out, and under XMAIL 1.18. > > Good luck :) > > Tuesday, March 30, 2004, 5:46:19 PM, Rob Arends wrote: > > > Have installed, tested with eicar (it failed to stop the email), and > > reverted back to 22/08/2003 version. This is the last version that > > works on my system. > > Whatever DOLIST did after the 22/08/2003 version, it has it broken here. > > The xmail debug shows Retcode=0 on the filter. So xav is either not > > finding a virus or not setting the retcode properly. I have tested > > AVG on the uudeviewed folder and it finds the eicar virus as expected. > > So it must be failing to set the retcode. > > I thought the new version might have a fix, but alas no. > > > My system is w2k sp4 / xmail 1.17 running flawlessly for a many months > > now (so long since I had to fiddle, I can't remember). And of course XAV. > > > Btw, this new version leaves tmp* folders behind. > > > Rob :-) > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of DOLIST Technical > > Center > > Sent: Tuesday, 30 March 2004 11:24 PM > > To: [EMAIL PROTECTED] > > Subject: [xmail] announce : XAV has been updated. > > > http://software.dolist.net/xav.asp > > > We use now UUDeview that works much better than munpack on MIME > > decoding and support UUDeview supports the uuencoding, xxencoding, > > Base64 and BinHex encoding methods, and is able to handle split-files > > (which have been sent in multiple parts) as well as multiple files at > > once, thus greatly simplifying the decoding process > > > XAV has been tested with these softwares. If you have parameters for > > AV and decoder softwares not listed in xav.ini, please send it to us > > to update and make it available for others. > > > Antivirus softwares > > ------------------- > > AVG 6.0 Server Edition. > > F-Prot Antivirus for DOS. > > F-Prot Antivirus for Windows. > > mcafee virus scanner. > > Sophos AV. > > > MIME decoder softwares > > ---------------------- > > mpack/munpack for DOS. > > UUDeview for DOS (in the package). > > MimeQP. > > > CORRECTIONS > > ----------- > > 09.mar.2004 - D.Olivier - Added log function. > > 10.mar.2004 - D.Olivier - Use UUDEview instead of munpack. > > 10.mar.2004 - D.Olivier - Add DecoderRemoveUNC= to xav.ini to delete > > \\?\ from message path. > > 16.oct.2003 - D.Olivier - Fixed problem with some temp directories. > > Also added in .ini file entries to use MimeQP decoder and F-Prot. > > 11.sep.2003 - D.Olivier - Added custom reject message (XAVMessage entry). > > 22.aug.2003 - J.Laffitte - now, seems to run on major unix systems. > > 19.aug.2003 - J.Laffitte - Timestamp in log added. Debug mode enhanced > > to log every message analyzed. > > 08.aug.2003 - J.Laffitte - temporary files and its directories are > > deleted in depth. Files in keep directory are named incrementaly if > > the filename is already used. > > 05.aug.2003 - J.Laffitte - replace the mkdir, chdir and rmdir > > functions by their equivalents in win32 api : CreateDirectory, > > SetCurrentDirectory and RemoveDirectory. > > 01.aug.2003 - Denis Olivier - update for public release. > > 31.jul.2003 - Julien Laffitte (DOLIST.NET) - main and primary coding. > > > > Sincerely, > > -- > > DOLIST Technical Center > > __________________________________________________ > > > DOLIST.NET, Internet E-mail List Server Technology DOLIST information at : > > http://www.dolist.net > > > - > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > the body of a message to [EMAIL PROTECTED] For general help: > > send the line "help" in the body of a message to > > [EMAIL PROTECTED] > > > - > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > the body of a message to [EMAIL PROTECTED] For general help: > > send the line "help" in the body of a message to > > [EMAIL PROTECTED] > > > Best regards, > -- > DOLIST Technical Center > __________________________________________________ > > DOLIST.NET, Internet E-mail List Server Technology DOLIST information at : > http://www.dolist.net > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in the body > of a message to [EMAIL PROTECTED] For general help: send the line > "help" in the body of a message to [EMAIL PROTECTED] > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]