Clamd

[Alex Neuman]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Well, it can be faster to have a program that's always loaded and in
memory scan the incoming datastream - but it MailScanner doesn't work that
way. It receives a bunch of messages before it "wakes up", looks at the
queue, scans everything from within perl using the module faster than it
would be to individually feed everything to clamd, and dumps whatever's
left after processing in the "real" queue. At least that's what I
understand.

> On Sep 14, 2005, at 11:46 AM, Alex Neuman wrote:
>
>>  The only reason you'd want to be running clamd in the first place is
>> to use it to power clamav-milter in order to prescan for viruses at
>> the MTA level to reduce the load on MailScanner from having to scan
>> virus-laden e-mails for spam.
>>
>
> That's actually not far from the mark.  Only mimedefang instead of
> clamav-milter.
>
> We're thinking about having off-campus IP addresses get scanned by
> mimedefang, and reject during SMTP if it contains a virus.  Then have
> on-campus IP addresses still get scanned by MailScanner (there some
> subtle interactions that cause us to not want to do SMTP rejection for
> on-campus IP addresses).
>
> Mimedefang uses clamd.  When I proposed the opposite question to them
> (using the ClamAV perl module) their claim was that they can't think of
> how anything could be faster than clamd.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!