MailScanner Digest, Vol 16, Issue 38
Martin.Hepworth
martinh at solidstatelogic.com
Thu Apr 26 13:44:04 IST 2007
Bjorgen
Dues to the main MailScanner developer being extremely busy with his day
job (hence the delay between 4.57 and 4.58) and then him being extremely
sick in hospital for several weeks (hence no sign of a 4.59 release).
Anything you'd like to see in a future release when Julian's feeling up
to it?
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Bjorgen T. Eatinger
> Sent: 25 April 2007 19:39
> To: mailscanner at lists.mailscanner.info
> Subject: RE: MailScanner Digest, Vol 16, Issue 38
>
>
> Why haven't there been any updates to MailScanner for a long time?
> Bjorgen
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of mailscanner-
> request at lists.mailscanner.info
> Sent: Wednesday, April 25, 2007 4:00 AM
> To: mailscanner at lists.mailscanner.info
> Subject: MailScanner Digest, Vol 16, Issue 38
>
> Send MailScanner mailing list submissions to
> mailscanner at lists.mailscanner.info
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> or, via email, send a message with subject or body 'help' to
> mailscanner-request at lists.mailscanner.info
>
> You can reach the person managing the list at
> mailscanner-owner at lists.mailscanner.info
>
> When replying, please edit your Subject line so it is more specific
than
> "Re: Contents of MailScanner digest..."
>
>
> Today's Topics:
>
> 1. RE: Coming from everywhere (James R. Stevens)
> 2. RE: Coming from everywhere (Stephen Swaney)
> 3. No sendmail processes start when MS starts ( Alden Levy )
> 4. RE: No sendmail processes start when MS starts (Mike Kercher)
> 5. RE: No sendmail processes start when MS starts (Mike Kercher)
> 6. Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> (Kapetanakis Giannis)
> 7. Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> (Kapetanakis Giannis)
> 8. RE: No sendmail processes start when MS starts (Alden Levy)
> 9. RE: No sendmail processes start when MS starts (Mike Kercher)
> 10. RE: No sendmail processes start when MS starts (Alden Levy)
> 11. Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> (Michael Mansour)
> 12. RE: No sendmail processes start when MS starts (Martin.Hepworth)
> 13. Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> (Julian Field)
> 14. Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> (Julian Field)
> 15. Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> (Julian Field)
> 16. Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> (Mogens Melander)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 24 Apr 2007 15:49:17 -0500
> From: "James R. Stevens" <jstevens at athensdistributing.com>
> Subject: RE: Coming from everywhere
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Message-ID:
>
<1A65E6BAEADF9B4F865314484A13ECF160885D at atlas.athensdistributing.com
> >
> Content-Type: text/plain; charset="utf-8"
>
> Ok, I've been working on this for a few days and keep getting build
errors
> on libsnert.
> Trying to install Libsnert1.63 and milter-null.
> Working with RedHat 9 box and RH ES and get the same issue when issue
> 'make build' of libsnert...
> sendmail-8.12.8-9.90 which I understand already has libmilter
compiled.
>
> cli->/usr/sbin/sendmail -d0.1 -bv root | grep MILTER
>
> returns
>
> MATCHGECOS MILTER MIME7TO8 MIME8TO7 NAMED_BIND NETINET NETINET6
>
> After configure (No options) of libsnert I get this this after make
> build...Anyone hve clear directions to install milters on RH 9 and
RHES?
>
> gcc -I/usr/include/db4 -I/usr/local/org/sqlite/include -D_REENTRANT
-O2 -
> Wall -I./../../include -L/usr/local/org/sqlite/lib -L./../../lib -o
> smtpout smtpout.c -lsnert -lpthread -ldl
> ./../../lib/libsnert.a(socket2.o)(.text+0x3ee): In function
> `socketAddressCreate':
> : undefined reference to `VectorGet'
> ..
> [Snipit]
> ..
> collect2: ld returned 1 exit status
> make[1]: *** [smtpout] Error 1
> make[1]: Leaving directory `/usr/local/com/snert/src/tools'
> make: *** [build] Error 2
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Julian Field
> Sent: Friday, April 20, 2007 12:11 PM
> To: MailScanner discussion
> Subject: Re: Coming from everywhere
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
>
> Matt Kettler wrote:
> > James R. Stevens wrote:
> >
> >> Have we already addressed these âEUR~Failure noticeâEUR(tm) ,
> >> âEUR~UndeliverableâEUR(tm) âEUR"mails that are coming from
everywhere.
> It
> >> seems to be more and more users are seeing these messages getting
> through. Some 100 per day.
> >>
> >>
> >>
> >> Anyone else seeing these things? Different subjects etc..
> >>
> >
> > http://www.google.com/search?hl=en&q=backscatter+email&btnG=Search
> >
> If you haven't got it installed already, grab a copy of milter-null.
> Kills these things dead instantly. And you still get the delivery
failure
> messages that were actually caused by you mistyping addresses, it
doesn't
> just ditch all delivery failure reports.
>
> Jules
>
> - --
> Julian Field MEng CITP
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> MailScanner customisation, or any advanced system administration help?
> Contact me at Jules at Jules.FM
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For
all
> your IT requirements visit www.transtec.co.uk
>
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.6.0 (Build 214)
> Charset: UTF-8
>
> wj8DBQFGKPUsEfZZRxQVtlQRAtqlAJ9rE1wJ6zM5SPW2hMxAjFZeEnOydgCgia76
> J+SPMS4iVyJIU9evgwIKT2E=
> =GygJ
> -----END PGP SIGNATURE-----
>
> --
> This message has been scanned for viruses and dangerous content by
> MailScanner, and is believed to be clean.
> For all your IT requirements visit www.transtec.co.uk
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
> --
> This message has been scanned for viruses and dangerous content by
Athens
> Hyperion Scanner, and is believed to be clean.
>
>
> --
> This message has been scanned for viruses and
> dangerous content by Athens Hyperion Scanner, and is
> believed to be clean.
>
>
> ------------------------------
>
> Message: 2
> Date: Tue, 24 Apr 2007 17:14:52 -0400
> From: "Stephen Swaney" <steve.swaney at fsl.com>
> Subject: RE: Coming from everywhere
> To: "'MailScanner discussion'" <mailscanner at lists.mailscanner.info>
> Message-ID: <075e01c786b5$996f28b0$cc4d7a10$@swaney at fsl.com>
> Content-Type: text/plain; charset="utf-8"
>
>
>
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-
> > bounces at lists.mailscanner.info] On Behalf Of James R. Stevens
> > Sent: Tuesday, April 24, 2007 4:49 PM
> > To: MailScanner discussion
> > Subject: RE: Coming from everywhere
> >
> > Ok, I've been working on this for a few days and keep getting build
> > errors on libsnert.
> > Trying to install Libsnert1.63 and milter-null.
> > Working with RedHat 9 box and RH ES and get the same issue when
issue
> > 'make build' of libsnert...
> > sendmail-8.12.8-9.90 which I understand already has libmilter
compiled.
> >
> > cli->/usr/sbin/sendmail -d0.1 -bv root | grep MILTER
> >
> > returns
> >
> > MATCHGECOS MILTER MIME7TO8 MIME8TO7 NAMED_BIND NETINET NETINET6
> >
> > After configure (No options) of libsnert I get this this after make
> > build...Anyone hve clear directions to install milters on RH 9 and
> > RHES?
> >
> > gcc -I/usr/include/db4 -I/usr/local/org/sqlite/include -D_REENTRANT
-O2
> > -Wall -I./../../include -L/usr/local/org/sqlite/lib -L./../../lib
-o
> > smtpout smtpout.c -lsnert -lpthread -ldl
> > ./../../lib/libsnert.a(socket2.o)(.text+0x3ee): In function
> > `socketAddressCreate':
> > : undefined reference to `VectorGet'
> > ..
> > [Snipit]
> > ..
> > collect2: ld returned 1 exit status
> > make[1]: *** [smtpout] Error 1
> > make[1]: Leaving directory `/usr/local/com/snert/src/tools'
> > make: *** [build] Error 2
> >
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-
> > bounces at lists.mailscanner.info] On Behalf Of Julian Field
> > Sent: Friday, April 20, 2007 12:11 PM
> > To: MailScanner discussion
> > Subject: Re: Coming from everywhere
> >
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> >
> >
> > Matt Kettler wrote:
> > > James R. Stevens wrote:
> > >
>
> You're better off going to www.snertsoft .com for support. Anthony
Howe
> does not monitor this list although I've bcc'd him on this response.
>
> Best regards,
>
> Steve
>
> Steve Swaney
> steve at fsl.com
>
>
>
> ------------------------------
>
> Message: 3
> Date: Tue, 24 Apr 2007 22:38:23 +0000
> From: " Alden Levy " <alden at engineno9inc.com>
> Subject: No sendmail processes start when MS starts
> To: mailscanner at lists.mailscanner.info
> Message-ID:
>
<329319901-1177455456-cardhu_blackberry.rim.net-1466958025- at bwe026-
> cell00.bisx.prod.on.blackberry>
>
> Content-Type: text/plain
>
> I've been using MS for a few years now with very few problems.
However, my
> old server is on its last legs, so I've decided to migrate to a shiny
new
> box. I've moved my /etc/MailScanner conf, prefs, rules, etc. files
from
> the old box to the new. I've not yet moved bayes, but I assume that
> shouldn't be a problem (right?)
>
> The new OS is CentOS 4.4, and I've upgraded MS to the latest version.
I'm
> unsure if MS worked properly before the upgrade. I am also using
sendmail
> 8.13 (the old server was 8.10), and I changed the Lock Type. I've
upgraded
> sa to 3.18 and clamav to 0.92, but I'm using clamav, not clamavmodule,
so
> that should work.
>
> After I installed, I went through the routine of chkconfig sendmail
> off.....
>
> When I start up MS, I get notification "starting MailScanner [OK]"
(or
> similar--I'm not in front of a console now), but no sendmail processes
are
> started. My maillog files seem to be okay, all the children start, sa
is
> okay as is clam; but of course, there are no sendmail processes.
>
> When I lint sa, everything's okay. I can't seem to debug MS; it hangs,
> because there's no mail--or is my assumption incorrect? I'm not sure
> where to look, though. Any suggestions would be appreciated.
>
> Thanks,
> Alden
>
> Alden Levy
> Engine No. 9, Inc.
> 130 West 57th Street, Suite 2F
> New York, NY 10019
> (212) 981-1122
> (212) 504-9598 (fax)
>
> www.engineno9inc.com
>
>
>
> ------------------------------
>
> Message: 4
> Date: Tue, 24 Apr 2007 18:02:46 -0500
> From: "Mike Kercher" <mike at vesol.com>
> Subject: RE: No sendmail processes start when MS starts
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Message-ID:
>
<6115482898C59848B35DB9D491C9A28E4D87 at srv1.home.middlefinger.net>
> Content-Type: text/plain; charset="us-ascii"
>
> mailscanner-bounces at lists.mailscanner.info <> scribbled on :
>
> : I've been using MS for a few years now with very few
> : problems. However, my old server is on its last legs, so I've
> : decided to migrate to a shiny new box. I've moved my
> : /etc/MailScanner conf, prefs, rules, etc. files from the old
> : box to the new. I've not yet moved bayes, but I assume that
> : shouldn't be a problem (right?)
> :
> : The new OS is CentOS 4.4, and I've upgraded MS to the latest
> : version. I'm unsure if MS worked properly before the upgrade.
> : I am also using sendmail 8.13 (the old server was 8.10), and
> : I changed the Lock Type. I've upgraded sa to 3.18 and clamav
> : to 0.92, but I'm using clamav, not clamavmodule, so that should
work.
> :
> : After I installed, I went through the routine of chkconfig
> : sendmail off.....
> :
> : When I start up MS, I get notification "starting MailScanner
> : [OK]" (or similar--I'm not in front of a console now), but no
> : sendmail processes are started. My maillog files seem to be
> : okay, all the children start, sa is okay as is clam; but of
> : course, there are no sendmail processes.
> :
> : When I lint sa, everything's okay. I can't seem to debug MS;
> : it hangs, because there's no mail--or is my assumption
> : incorrect? I'm not sure where to look, though. Any
> : suggestions would be appreciated.
> :
> : Thanks,
> : Alden
> :
>
> Did you STOP sendmail before starting MS?
>
> Mike
>
>
> ------------------------------
>
> Message: 5
> Date: Tue, 24 Apr 2007 18:12:08 -0500
> From: "Mike Kercher" <mike at vesol.com>
> Subject: RE: No sendmail processes start when MS starts
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Message-ID:
>
<6115482898C59848B35DB9D491C9A28E4D88 at srv1.home.middlefinger.net>
> Content-Type: text/plain; charset="us-ascii"
>
> mailscanner-bounces at lists.mailscanner.info <> scribbled on :
>
> : I've been using MS for a few years now with very few
> : problems. However, my old server is on its last legs, so I've
> : decided to migrate to a shiny new box. I've moved my
> : /etc/MailScanner conf, prefs, rules, etc. files from the old
> : box to the new. I've not yet moved bayes, but I assume that
> : shouldn't be a problem (right?)
> :
> : The new OS is CentOS 4.4, and I've upgraded MS to the latest
> : version. I'm unsure if MS worked properly before the upgrade.
> : I am also using sendmail 8.13 (the old server was 8.10), and
> : I changed the Lock Type. I've upgraded sa to 3.18 and clamav
> : to 0.92, but I'm using clamav, not clamavmodule, so that should
work.
> :
> : After I installed, I went through the routine of chkconfig
> : sendmail off.....
> :
> : When I start up MS, I get notification "starting MailScanner
> : [OK]" (or similar--I'm not in front of a console now), but no
> : sendmail processes are started. My maillog files seem to be
> : okay, all the children start, sa is okay as is clam; but of
> : course, there are no sendmail processes.
> :
> : When I lint sa, everything's okay. I can't seem to debug MS;
> : it hangs, because there's no mail--or is my assumption
> : incorrect? I'm not sure where to look, though. Any
> : suggestions would be appreciated.
> :
> : Thanks,
> : Alden
>
>
> I'd also look in other logs...could this be an SELinux problem?
>
> Mike
>
>
>
>
> ------------------------------
>
> Message: 6
> Date: Wed, 25 Apr 2007 02:14:11 +0300 (EEST)
> From: Kapetanakis Giannis <bilias at edu.physics.uoc.gr>
> Subject: Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Message-ID:
> <Pine.LNX.4.64.0704250211480.24489 at python.edu.physics.uoc.gr>
> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
>
> On Tue, 24 Apr 2007, Julian Field wrote:
>
> > Kapetanakis Giannis wrote:
> >>
> >> Clamd works fast on the other hand.
> >> Maybe it should be included officialy (clamdscan)
> >> in MailScanner's the next version.
> > Why? I already support the "clamavmodule" which is faster than clamd
> anyway.
> >
> > Jules
> >
>
> I haven't tried clamavmodule.
>
> I took the wrapper for clamd and the modified VirusSweep.pm
> and it works sweet. I'll also check clamavmodule to see what's going
on :)
>
> Giannis
>
>
> ------------------------------
>
> Message: 7
> Date: Wed, 25 Apr 2007 02:19:23 +0300 (EEST)
> From: Kapetanakis Giannis <bilias at edu.physics.uoc.gr>
> Subject: Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Message-ID:
> <Pine.LNX.4.64.0704250218260.24489 at python.edu.physics.uoc.gr>
> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
>
> On Tue, 24 Apr 2007, Ed Bruce wrote:
>
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Julian Field wrote:
> >>
> >>
> >> Kapetanakis Giannis wrote:
> >>> On Mon, 23 Apr 2007, Martin wrote:
> >>
> >>> Clamd works fast on the other hand.
> >>> Maybe it should be included officialy (clamdscan)
> >>> in MailScanner's the next version.
> >> Why? I already support the "clamavmodule" which is faster than
clamd
> anyway.
> >>
> >> Jules
> >>
> >
> > And I haven't noticed any performance degradation with clamavmodule
> > since upgrading to 0.90.2.
>
> Same for me...
>
> I remembered now that I did try clamavmodule.
> The load now is seen in the MailScanner but I guess it is
> the perl module that is being loaded.
>
> >From a little debug I did in clamavscan
> what it does and takes so long is:
>
> Loading the database
> copying the database to /tmp/
> loading the database from /tmp
>
> It does this for every mail it comes in.
>
> How does clamavmodule handle the db?
>
> Clamd only loads the db once.
>
> Giannis
>
>
> ------------------------------
>
> Message: 8
> Date: Tue, 24 Apr 2007 21:43:45 -0400
> From: "Alden Levy" <alden at engineno9inc.com>
> Subject: RE: No sendmail processes start when MS starts
> To: <mailscanner at lists.mailscanner.info>
> Message-ID: <000601c786db$2ac2ae70$5e01a8c0 at AldenLap>
> Content-Type: text/plain; charset="us-ascii"
>
> -----Original Message-----
> From: Alden Levy [mailto:alden at engineno9inc.com]
> Sent: Tuesday, April 24, 2007 6:38 PM
> To: mailscanner at lists.mailscanner.info
> Subject: No sendmail processes start when MS starts
>
> : I've been using MS for a few years now with very few
> : problems. However, my old server is on its last legs, so I've
> : decided to migrate to a shiny new box. I've moved my
> : /etc/MailScanner conf, prefs, rules, etc. files from the old
> : box to the new. I've not yet moved bayes, but I assume that
> : shouldn't be a problem (right?)
> :
> : The new OS is CentOS 4.4, and I've upgraded MS to the latest
> : version. I'm unsure if MS worked properly before the upgrade.
> : I am also using sendmail 8.13 (the old server was 8.10), and
> : I changed the Lock Type. I've upgraded sa to 3.18 and clamav
> : to 0.92, but I'm using clamav, not clamavmodule, so that should
work.
> :
> : After I installed, I went through the routine of chkconfig
> : sendmail off.....
> :
> : When I start up MS, I get notification "starting MailScanner
> : [OK]" (or similar--I'm not in front of a console now), but no
> : sendmail processes are started. My maillog files seem to be
> : okay, all the children start, sa is okay as is clam; but of
> : course, there are no sendmail processes.
> :
> : When I lint sa, everything's okay. I can't seem to debug MS;
> : it hangs, because there's no mail--or is my assumption
> : incorrect? I'm not sure where to look, though. Any
> : suggestions would be appreciated.
> :
> : Thanks,
> : Alden
>
> : I've been using MS for a few years now with very few
> : problems. However, my old server is on its last legs, so I've
> : decided to migrate to a shiny new box. I've moved my
> : /etc/MailScanner conf, prefs, rules, etc. files from the old
> : box to the new. I've not yet moved bayes, but I assume that
> : shouldn't be a problem (right?)
> :
> : The new OS is CentOS 4.4, and I've upgraded MS to the latest
> : version. I'm unsure if MS worked properly before the upgrade.
> : I am also using sendmail 8.13 (the old server was 8.10), and
> : I changed the Lock Type. I've upgraded sa to 3.18 and clamav
> : to 0.92, but I'm using clamav, not clamavmodule, so that should
work.
> :
> : After I installed, I went through the routine of chkconfig
> : sendmail off.....
> :
> : When I start up MS, I get notification "starting MailScanner
> : [OK]" (or similar--I'm not in front of a console now), but no
> : sendmail processes are started. My maillog files seem to be
> : okay, all the children start, sa is okay as is clam; but of
> : course, there are no sendmail processes.
> :
> : When I lint sa, everything's okay. I can't seem to debug MS;
> : it hangs, because there's no mail--or is my assumption
> : incorrect? I'm not sure where to look, though. Any
> : suggestions would be appreciated.
> :
> : Thanks,
> : Alden
>
> I'd also look in other logs...could this be an SELinux problem?
>
> Mike
>
> SELinux is disabled. And, yes, I restarted MailScanner after the
install.
> Would that it were so easy! Please keep the ideas and suggestions
coming.
>
> Thanks,
> Alden
>
>
>
> ------------------------------
>
> Message: 9
> Date: Tue, 24 Apr 2007 21:05:45 -0500
> From: "Mike Kercher" <mike at vesol.com>
> Subject: RE: No sendmail processes start when MS starts
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Message-ID:
>
<6115482898C59848B35DB9D491C9A28E4D8A at srv1.home.middlefinger.net>
> Content-Type: text/plain; charset="us-ascii"
>
> mailscanner-bounces at lists.mailscanner.info <> scribbled on :
>
> :
> : I'd also look in other logs...could this be an SELinux problem?
> :
> : Mike
> :
> : SELinux is disabled. And, yes, I restarted MailScanner after
> : the install.
> : Would that it were so easy! Please keep the ideas and
> : suggestions coming.
> :
> : Thanks,
> : Alden
> :
>
> How about some log entries from /var/log/maillog and /var/log/messages
> at the time of a 'service MailScanner restart'. Just do this:
>
> # service MailScanner restart;tail -f /var/log/maillog
/var/log/message
>
> Paste a bit of those logs and also a ps -ef Might as well throw a
> chkconfig sendmail --list in there too.
>
> Mike
>
>
>
>
> ------------------------------
>
> Message: 10
> Date: Tue, 24 Apr 2007 22:29:31 -0400
> From: "Alden Levy" <alden at engineno9inc.com>
> Subject: RE: No sendmail processes start when MS starts
> To: <mailscanner at lists.mailscanner.info>
> Message-ID: <001101c786e1$900b6d20$5e01a8c0 at AldenLap>
> Content-Type: text/plain; charset="us-ascii"
>
> :
> : I'd also look in other logs...could this be an SELinux problem?
> :
> : Mike
> :
> : SELinux is disabled. And, yes, I restarted MailScanner after
> : the install.
> : Would that it were so easy! Please keep the ideas and
> : suggestions coming.
> :
> : Thanks,
> : Alden
> :
>
> How about some log entries from /var/log/maillog and /var/log/messages
> at the time of a 'service MailScanner restart'. Just do this:
>
> # service MailScanner restart;tail -f /var/log/maillog
/var/log/message
>
> Paste a bit of those logs and also a ps -ef Might as well throw a
> chkconfig sendmail --list in there too.
>
> Mike
>
> Here you go:
> service MailScanner restart;tail -f /var/log/maillog /var/log/messages
> Shutting down MailScanner: [ OK ]
> Starting MailScanner: [ OK ]
> ==> /var/log/maillog <==
> Apr 24 22:25:55 E9 MailScanner[14241]: Read 764 hostnames from the
> phishing
> whitelist
> Apr 24 22:25:55 E9 MailScanner[14241]: Using SpamAssassin results
cache
> Apr 24 22:25:55 E9 MailScanner[14241]: Connected to SpamAssassin cache
> database
> Apr 24 22:25:57 E9 MailScanner[14241]: Using locktype = posix
> Apr 24 22:25:57 E9 MailScanner[14241]: Creating hardcoded struct_flock
> subroutine for linux (Linux-type)
> Apr 24 22:26:21 E9 MailScanner[14239]: MailScanner child caught a
SIGHUP
> Apr 24 22:26:21 E9 MailScanner[14229]: MailScanner child caught a
SIGHUP
> Apr 24 22:26:21 E9 MailScanner[14237]: MailScanner child caught a
SIGHUP
> Apr 24 22:26:21 E9 MailScanner[14241]: MailScanner child caught a
SIGHUP
> Apr 24 22:26:21 E9 MailScanner[14235]: MailScanner child caught a
SIGHUP
>
> ==> /var/log/messages <==
> Apr 24 22:10:01 E9 logger: weblogs: (14070) starting.
> Apr 24 22:10:02 E9 logger: weblogs: (14070) done.
> Apr 24 22:20:01 E9 logger: weblogs: (14080) starting.
> Apr 24 22:20:02 E9 logger: weblogs: (14080) done.
> Apr 24 22:24:14 E9 sshd(pam_unix)[14089]: session opened for user root
by
> root(uid=0)
> Apr 24 22:24:49 E9 MailScanner: MailScanner -15 succeeded
> Apr 24 22:25:19 E9 MailScanner: MailScanner shutdown failed
> Apr 24 22:25:35 E9 MailScanner: succeeded
> Apr 24 22:26:21 E9 MailScanner: MailScanner -15 succeeded
> Apr 24 22:26:36 E9 MailScanner: succeeded
>
> ==> /var/log/maillog <==
> Apr 24 22:26:36 E9 MailScanner[14316]: MailScanner E-Mail Virus
Scanner
> version 4.58.9 starting...
> Apr 24 22:26:36 E9 MailScanner[14316]: Read 764 hostnames from the
> phishing
> whitelist
> Apr 24 22:26:37 E9 MailScanner[14316]: Using SpamAssassin results
cache
> Apr 24 22:26:37 E9 MailScanner[14316]: Connected to SpamAssassin cache
> database
> Apr 24 22:26:38 E9 MailScanner[14316]: Using locktype = posix
> Apr 24 22:26:38 E9 MailScanner[14316]: Creating hardcoded struct_flock
> subroutine for linux (Linux-type)
> Apr 24 22:26:41 E9 MailScanner[14322]: MailScanner E-Mail Virus
Scanner
> version 4.58.9 starting...
> Apr 24 22:26:41 E9 MailScanner[14322]: Read 764 hostnames from the
> phishing
> whitelist
> Apr 24 22:26:42 E9 MailScanner[14322]: Using SpamAssassin results
cache
> Apr 24 22:26:42 E9 MailScanner[14322]: Connected to SpamAssassin cache
> database
> Apr 24 22:26:43 E9 MailScanner[14322]: Using locktype = posix
> Apr 24 22:26:43 E9 MailScanner[14322]: Creating hardcoded struct_flock
> subroutine for linux (Linux-type)
> Apr 24 22:26:46 E9 MailScanner[14324]: MailScanner E-Mail Virus
Scanner
> version 4.58.9 starting...
> Apr 24 22:26:46 E9 MailScanner[14324]: Read 764 hostnames from the
> phishing
> whitelist
> Apr 24 22:26:47 E9 MailScanner[14324]: Using SpamAssassin results
cache
> Apr 24 22:26:47 E9 MailScanner[14324]: Connected to SpamAssassin cache
> database
> Apr 24 22:26:48 E9 MailScanner[14324]: Using locktype = posix
> Apr 24 22:26:48 E9 MailScanner[14324]: Creating hardcoded struct_flock
> subroutine for linux (Linux-type)
> Apr 24 22:26:51 E9 MailScanner[14326]: MailScanner E-Mail Virus
Scanner
> version 4.58.9 starting...
> Apr 24 22:26:51 E9 MailScanner[14326]: Read 764 hostnames from the
> phishing
> whitelist
> Apr 24 22:26:52 E9 MailScanner[14326]: Using SpamAssassin results
cache
> Apr 24 22:26:52 E9 MailScanner[14326]: Connected to SpamAssassin cache
> database
> Apr 24 22:26:53 E9 MailScanner[14326]: Using locktype = posix
> Apr 24 22:26:53 E9 MailScanner[14326]: Creating hardcoded struct_flock
> subroutine for linux (Linux-type)
>
>
>
> chkconfig sendmail --list
> sendmail 0:off 1:off 2:off 3:off 4:off 5:off 6:off
>
> Thanks,
> Alden
>
>
>
> ------------------------------
>
> Message: 11
> Date: Wed, 25 Apr 2007 16:35:02 +1000 (EST)
> From: Michael Mansour <micoots at yahoo.com>
> Subject: Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Message-ID: <989725.51785.qm at web33303.mail.mud.yahoo.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hi Ed,
>
> Ed Bruce <edwardbruce at sbcglobal.net> wrote:Julian Field wrote:
> >
> > Kapetanakis Giannis wrote:
> >> On Mon, 23 Apr 2007, Martin wrote:
> >
> >>> Arto wrote:
> >>>
> >>>> We had this too. Uninstalling clamav* and installing it again
helped.
> >>>>
> >>>> -arto
> >>>>
> >>> Thanks for all replies. Read about this issue on the clamav-list
and
> >>> hopefully it will be fixed in the next version.
> >> I have similar problems with clamav myself.
> >
> >> What I did that improved a little bit
> >> was deleting the virus database in /var/lib/clamav/*
> >> and running freshclam again.
> >
> >> Still is very slow. If you try clamscan -debug you will
> >> find out why it is so damn slow....
> >
> >> Clamd works fast on the other hand.
> >> Maybe it should be included officialy (clamdscan)
> >> in MailScanner's the next version.
> > Why? I already support the "clamavmodule" which is faster than clamd
> anyway.
> >
> > Jules
>
> And I haven't noticed any performance degradation with clamavmodule
> since upgrading to 0.90.2.
> Pardon my ignorance Ed, but I'm unfamiliar with clamavmodule, I just
use
> the clamscan approach and have also experienced the load shoot up
since
> updating to 0.90.2.
>
> Are there any instructions on installing clamavmodule?
>
> If that fixes the load problem I'll be happy to do it.
>
> Thanks.
>
> Michael.
>
>
> Send instant messages to your online friends
> http://au.messenger.yahoo.com
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL:
>
http://lists.mailscanner.info/pipermail/mailscanner/attachments/20070425
/d
> 577b665/attachment-0001.html
>
> ------------------------------
>
> Message: 12
> Date: Wed, 25 Apr 2007 09:07:11 +0100
> From: "Martin.Hepworth" <martinh at solidstatelogic.com>
> Subject: RE: No sendmail processes start when MS starts
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Message-ID: <a4f6a2d5e4e5474f9ceedd224dafa8bf at solidstatelogic.com>
> Content-Type: text/plain; charset="us-ascii"
>
> Alden
>
> Try "service MailScanner startin"
>
> This starts the incoming sendmail. Have a look for errors In the logs
-
> /var/log/messages and /var/log/maillog.
>
> Also have a look at the mailscanner rc script and make sure things are
> pointing at the correct sendmail configs/binaries etc...
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-
> > bounces at lists.mailscanner.info] On Behalf Of Alden Levy
> > Sent: 25 April 2007 03:30
> > To: mailscanner at lists.mailscanner.info
> > Subject: RE: No sendmail processes start when MS starts
> >
> > :
> > : I'd also look in other logs...could this be an SELinux problem?
> > :
> > : Mike
> > :
> > : SELinux is disabled. And, yes, I restarted MailScanner after
> > : the install.
> > : Would that it were so easy! Please keep the ideas and
> > : suggestions coming.
> > :
> > : Thanks,
> > : Alden
> > :
> >
> > How about some log entries from /var/log/maillog and
/var/log/messages
> > at the time of a 'service MailScanner restart'. Just do this:
> >
> > # service MailScanner restart;tail -f /var/log/maillog
> /var/log/message
> >
> > Paste a bit of those logs and also a ps -ef Might as well throw a
> > chkconfig sendmail --list in there too.
> >
> > Mike
> >
> > Here you go:
> > service MailScanner restart;tail -f /var/log/maillog
/var/log/messages
> > Shutting down MailScanner: [ OK ]
> > Starting MailScanner: [ OK ]
> > ==> /var/log/maillog <==
> > Apr 24 22:25:55 E9 MailScanner[14241]: Read 764 hostnames from the
> > phishing
> > whitelist
> > Apr 24 22:25:55 E9 MailScanner[14241]: Using SpamAssassin results
> cache
> > Apr 24 22:25:55 E9 MailScanner[14241]: Connected to SpamAssassin
cache
> > database
> > Apr 24 22:25:57 E9 MailScanner[14241]: Using locktype = posix
> > Apr 24 22:25:57 E9 MailScanner[14241]: Creating hardcoded
struct_flock
> > subroutine for linux (Linux-type)
> > Apr 24 22:26:21 E9 MailScanner[14239]: MailScanner child caught a
> SIGHUP
> > Apr 24 22:26:21 E9 MailScanner[14229]: MailScanner child caught a
> SIGHUP
> > Apr 24 22:26:21 E9 MailScanner[14237]: MailScanner child caught a
> SIGHUP
> > Apr 24 22:26:21 E9 MailScanner[14241]: MailScanner child caught a
> SIGHUP
> > Apr 24 22:26:21 E9 MailScanner[14235]: MailScanner child caught a
> SIGHUP
> >
> > ==> /var/log/messages <==
> > Apr 24 22:10:01 E9 logger: weblogs: (14070) starting.
> > Apr 24 22:10:02 E9 logger: weblogs: (14070) done.
> > Apr 24 22:20:01 E9 logger: weblogs: (14080) starting.
> > Apr 24 22:20:02 E9 logger: weblogs: (14080) done.
> > Apr 24 22:24:14 E9 sshd(pam_unix)[14089]: session opened for user
root
> by
> > root(uid=0)
> > Apr 24 22:24:49 E9 MailScanner: MailScanner -15 succeeded
> > Apr 24 22:25:19 E9 MailScanner: MailScanner shutdown failed
> > Apr 24 22:25:35 E9 MailScanner: succeeded
> > Apr 24 22:26:21 E9 MailScanner: MailScanner -15 succeeded
> > Apr 24 22:26:36 E9 MailScanner: succeeded
> >
> > ==> /var/log/maillog <==
> > Apr 24 22:26:36 E9 MailScanner[14316]: MailScanner E-Mail Virus
> Scanner
> > version 4.58.9 starting...
> > Apr 24 22:26:36 E9 MailScanner[14316]: Read 764 hostnames from the
> > phishing
> > whitelist
> > Apr 24 22:26:37 E9 MailScanner[14316]: Using SpamAssassin results
> cache
> > Apr 24 22:26:37 E9 MailScanner[14316]: Connected to SpamAssassin
cache
> > database
> > Apr 24 22:26:38 E9 MailScanner[14316]: Using locktype = posix
> > Apr 24 22:26:38 E9 MailScanner[14316]: Creating hardcoded
struct_flock
> > subroutine for linux (Linux-type)
> > Apr 24 22:26:41 E9 MailScanner[14322]: MailScanner E-Mail Virus
> Scanner
> > version 4.58.9 starting...
> > Apr 24 22:26:41 E9 MailScanner[14322]: Read 764 hostnames from the
> > phishing
> > whitelist
> > Apr 24 22:26:42 E9 MailScanner[14322]: Using SpamAssassin results
> cache
> > Apr 24 22:26:42 E9 MailScanner[14322]: Connected to SpamAssassin
cache
> > database
> > Apr 24 22:26:43 E9 MailScanner[14322]: Using locktype = posix
> > Apr 24 22:26:43 E9 MailScanner[14322]: Creating hardcoded
struct_flock
> > subroutine for linux (Linux-type)
> > Apr 24 22:26:46 E9 MailScanner[14324]: MailScanner E-Mail Virus
> Scanner
> > version 4.58.9 starting...
> > Apr 24 22:26:46 E9 MailScanner[14324]: Read 764 hostnames from the
> > phishing
> > whitelist
> > Apr 24 22:26:47 E9 MailScanner[14324]: Using SpamAssassin results
> cache
> > Apr 24 22:26:47 E9 MailScanner[14324]: Connected to SpamAssassin
cache
> > database
> > Apr 24 22:26:48 E9 MailScanner[14324]: Using locktype = posix
> > Apr 24 22:26:48 E9 MailScanner[14324]: Creating hardcoded
struct_flock
> > subroutine for linux (Linux-type)
> > Apr 24 22:26:51 E9 MailScanner[14326]: MailScanner E-Mail Virus
> Scanner
> > version 4.58.9 starting...
> > Apr 24 22:26:51 E9 MailScanner[14326]: Read 764 hostnames from the
> > phishing
> > whitelist
> > Apr 24 22:26:52 E9 MailScanner[14326]: Using SpamAssassin results
> cache
> > Apr 24 22:26:52 E9 MailScanner[14326]: Connected to SpamAssassin
cache
> > database
> > Apr 24 22:26:53 E9 MailScanner[14326]: Using locktype = posix
> > Apr 24 22:26:53 E9 MailScanner[14326]: Creating hardcoded
struct_flock
> > subroutine for linux (Linux-type)
> >
> >
> >
> > chkconfig sendmail --list
> > sendmail 0:off 1:off 2:off 3:off 4:off 5:off
6:off
> >
> > Thanks,
> > Alden
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
>
>
>
>
> **********************************************************************
> Confidentiality : This e-mail and any attachments are intended for the
> addressee only and may be confidential. If they come to you in error
> you must take no action based on them, nor must you copy or show them
> to anyone. Please advise the sender by replying to this e-mail
> immediately and then delete the original from your computer.
>
> Opinion : Any opinions expressed in this e-mail are entirely those of
> the author and unless specifically stated to the contrary, are not
> necessarily those of the author's employer.
>
> Security Warning : Internet e-mail is not necessarily a secure
> communications medium and can be subject to data corruption. We advise
> that you consider this fact when e-mailing us.
>
> Viruses : We have taken steps to ensure that this e-mail and any
> attachments are free from known viruses but in keeping with good
> computing practice, you should ensure that they are virus free.
>
> Red Lion 49 Ltd T/A Solid State Logic
> Registered as a limited company in England and Wales
> (Company No:5362730)
> Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU,
> United Kingdom
> **********************************************************************
>
>
>
> ------------------------------
>
> Message: 13
> Date: Wed, 25 Apr 2007 10:49:22 +0100
> From: Julian Field <MailScanner at ecs.soton.ac.uk>
> Subject: Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Message-ID: <462F2422.7060508 at ecs.soton.ac.uk>
> Content-Type: text/plain; charset="UTF-8"
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
>
> Paul Hutchings wrote:
> > Newbie talking so feel free to shoot me down in flames :-)
> >
> > My understanding (from clamscan --debug) is that each time you run
> clamscan it appears it has to read the virus patterns, unpack them (to
> /tmp), scan the files, remove the files.
> >
> Correct.
> > This is the "probably talking out my bum" bit, but that sounds less
> efficient than clamd where (I assume) the daemon loads the definitions
> once and each child process doesn't have to do this?
> >
> The "clamavmodule" method is more efficient as it just communicates
> directly with the clam function library and doesn't involve any
external
> processes at all. The definitions are loaded up once and kept in
memory
> by the function library. This is also more reliable as there is no
> external daemon (clamd) which might crash, or leak memory or other
> resources.
>
> The signature files are monitored and if any of them change at all
then
> the library is immediately told to re-load the new definitions so it
is
> always using up to date signatures.
>
> If you use my latest ClamAV+SA package from www.mailscanner.info, that
> will install everything needed to use the "clamavmodule" method and
will
> even do the configuration for you.
>
> I hope that explains it to you :-)
>
> Jules.
>
> > Cheers,
> > Paul
> >
> > Paul Hutchings
> > Network Administrator, MIRA Ltd.
> > Tel: 44 (0)24 7635 5378
> > Fax: 44 (0)24 7635 8378
> > mailto:paul.hutchings at mira.co.uk
> >
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Scott Silva
> > Sent: 24 April 2007 17:09
> > To: mailscanner at lists.mailscanner.info
> > Subject: Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> >
> > Julian Field spake the following on 4/24/2007 8:52 AM:
> >
> >> Kapetanakis Giannis wrote:
> >>
> >>> On Mon, 23 Apr 2007, Martin wrote:
> >>>
> >>>> Arto wrote:
> >>>>
> >>>>
> >>>>> We had this too. Uninstalling clamav* and installing it again
> helped.
> >>>>>
> >>>>> -arto
> >>>>>
> >>>>>
> >>>> Thanks for all replies. Read about this issue on the clamav-list
and
> >>>> hopefully it will be fixed in the next version.
> >>>>
> >>> I have similar problems with clamav myself.
> >>>
> >>> What I did that improved a little bit
> >>> was deleting the virus database in /var/lib/clamav/*
> >>> and running freshclam again.
> >>>
> >>> Still is very slow. If you try clamscan -debug you will
> >>> find out why it is so damn slow....
> >>>
> >>> Clamd works fast on the other hand.
> >>> Maybe it should be included officialy (clamdscan)
> >>> in MailScanner's the next version.
> >>>
> >> Why? I already support the "clamavmodule" which is faster than
clamd
> anyway.
> >>
> >> Jules
> >>
> >>
> > Are there any tips on commandline diagnostics for the clamavmodule?
> > I have a system that has been choking with the module for 2 weeks,
and
> the
> > mailscanner.conf fix isn't working with it.
> > I am running clamav now, but the load is much higher.
> >
> > I am going to try the tip of clearing the definitions and re-running
> freshclam
> > to see if that helps.
> >
>
> Jules
>
> - --
> Julian Field MEng CITP
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> MailScanner customisation, or any advanced system administration help?
> Contact me at Jules at Jules.FM
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> For all your IT requirements visit www.transtec.co.uk
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.6.0 (Build 214)
> Charset: UTF-8
>
> wj8DBQFGLyUjEfZZRxQVtlQRAgHmAKDicios1jDH3ARV1ICK/aFwvNhxGQCeLwST
> aSDBRADTfsx8XmrCUPCKfIw=
> =sWwm
> -----END PGP SIGNATURE-----
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> For all your IT requirements visit www.transtec.co.uk
>
>
>
> ------------------------------
>
> Message: 14
> Date: Wed, 25 Apr 2007 10:53:12 +0100
> From: Julian Field <MailScanner at ecs.soton.ac.uk>
> Subject: Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Message-ID: <462F2508.3000505 at ecs.soton.ac.uk>
> Content-Type: text/plain; charset="ISO-8859-1"
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
>
> Kapetanakis Giannis wrote:
> > On Tue, 24 Apr 2007, Ed Bruce wrote:
> >
> >> -----BEGIN PGP SIGNED MESSAGE-----
> >> Hash: SHA1
> >>
> >> Julian Field wrote:
> >>>
> >>>
> >>> Kapetanakis Giannis wrote:
> >>>> On Mon, 23 Apr 2007, Martin wrote:
> >>>
> >>>> Clamd works fast on the other hand.
> >>>> Maybe it should be included officialy (clamdscan)
> >>>> in MailScanner's the next version.
> >>> Why? I already support the "clamavmodule" which is faster than
clamd
> >>> anyway.
> >>>
> >>> Jules
> >>>
> >>
> >> And I haven't noticed any performance degradation with clamavmodule
> >> since upgrading to 0.90.2.
> >
> > Same for me...
> >
> > I remembered now that I did try clamavmodule.
> > The load now is seen in the MailScanner but I guess it is
> > the perl module that is being loaded.
> >
> >> From a little debug I did in clamavscan
> > what it does and takes so long is:
> >
> > Loading the database
> > copying the database to /tmp/
> > loading the database from /tmp
> >
> > It does this for every mail it comes in.
> Slight correction: it does it once for every batch.
> >
> > How does clamavmodule handle the db?
> >
> > Clamd only loads the db once.
> clamavmodule loads the db once at startup. It then monitors the
> signature files and instantly reloads the db if the signatures files
> change at all.
> >
> > Giannis
>
> Jules
>
> - --
> Julian Field MEng CITP
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> MailScanner customisation, or any advanced system administration help?
> Contact me at Jules at Jules.FM
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> For all your IT requirements visit www.transtec.co.uk
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.6.0 (Build 214)
> Charset: ISO-8859-1
>
> wj8DBQFGLyUlEfZZRxQVtlQRAhm5AJ4p6bnCBNLPT8vl8aDKsfxBRrxPqACgnHxB
> 8yt9xZuLY9J8fq6e0jv2E0M=
> =Ot+1
> -----END PGP SIGNATURE-----
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> For all your IT requirements visit www.transtec.co.uk
>
>
>
> ------------------------------
>
> Message: 15
> Date: Wed, 25 Apr 2007 10:54:32 +0100
> From: Julian Field <MailScanner at ecs.soton.ac.uk>
> Subject: Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Message-ID: <462F2558.3060802 at ecs.soton.ac.uk>
> Content-Type: text/plain; charset="ISO-8859-1"
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
>
> Michael Mansour wrote:
> > Hi Ed,
> >
> > */Ed Bruce <edwardbruce at sbcglobal.net>/* wrote:
> >
> > Julian Field wrote:
> > >
> > > Kapetanakis Giannis wrote:
> > >> On Mon, 23 Apr 2007, Martin wrote:
> > >
> > >>> Arto wrote:
> > >>>
> > >>>> We had this too. Uninstalling clamav* and installing it
again
> > helped.
> > >>>>
> > >>>> -arto
> > >>>>
> > >>> Thanks for all replies. Read about this issue on the
> > clamav-list and
> > >>> hopefully it will be fixed in the next version.
> > >> I have similar problems with clamav myself.
> > >
> > >> What I did that improved a little bit
> > >> was deleting the virus database in /var/lib/clamav/*
> > >> and running freshclam again.
> > >
> > >> Still is very slow. If you try clamscan -debug you will
> > >> find out why it is so damn slow....
> > >
> > >> Clamd works fast on the other hand.
> > >> Maybe it should be included officialy (clamdscan)
> > >> in MailScanner's the next version.
> > > Why? I already support the "clamavmodule" which is faster than
> > clamd anyway.
> > >
> > > Jules
> >
> > And I haven't noticed any performance degradation with
clamavmodule
> > since upgrading to 0.90.2.
> >
> > Pardon my ignorance Ed, but I'm unfamiliar with clamavmodule, I just
> > use the clamscan approach and have also experienced the load shoot
up
> > since updating to 0.90.2.
> >
> > Are there any instructions on installing clamavmodule?
> Install the easy-to-use ClamAV+SA package on www.mailscanner.info.
Dead
> simple.
> >
> > If that fixes the load problem I'll be happy to do it.
> >
> > Thanks.
> >
> > Michael.
> >
> > Send instant messages to your online friends
> > http://au.messenger.yahoo.com
> >
>
> Jules
>
> - --
> Julian Field MEng CITP
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> MailScanner customisation, or any advanced system administration help?
> Contact me at Jules at Jules.FM
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> For all your IT requirements visit www.transtec.co.uk
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.6.0 (Build 214)
> Charset: ISO-8859-1
>
> wj8DBQFGLyVlEfZZRxQVtlQRAmBuAJ0YKR63Xsqlk9+XxqKnMkQqcOF41ACeKKeP
> wAk5atE53YSjXciVUNDdYTs=
> =YhPX
> -----END PGP SIGNATURE-----
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> For all your IT requirements visit www.transtec.co.uk
>
>
>
> ------------------------------
>
> Message: 16
> Date: Wed, 25 Apr 2007 12:26:58 +0200 (CEST)
> From: "Mogens Melander" <mogens at fumlersoft.dk>
> Subject: Re: Upgrade to clamav 0.90.2 makes scanning extremely slow
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Message-ID:
> <1202.90.184.17.152.1177496818.squirrel at mail.fumlersoft.dk>
> Content-Type: text/plain;charset=utf-8
>
> Hi all,
>
> >> Are there any instructions on installing clamavmodule?
> > Install the easy-to-use ClamAV+SA package on www.mailscanner.info.
Dead
> > simple.
>
> I'm using openprotect w/ clamav. Would i be able to install
> this "easy-to-use ClamAV+SA package" on top of openprotect,
> and live to tell about it ?
>
>
> --
> Later
>
> Mogens Melander
> +45 40 85 71 38
> +66 870 133 224
>
>
>
>
> --
> This message has been scanned for viruses and
> dangerous content by OpenProtect(http://www.openprotect.com), and is
> believed to be clean.
>
>
>
> ------------------------------
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read the Wiki (http://wiki.mailscanner.info/).
>
> Support MailScanner development - buy the book off the website!
>
>
> End of MailScanner Digest, Vol 16, Issue 38
> *******************************************
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the
addressee only and may be confidential. If they come to you in error
you must take no action based on them, nor must you copy or show them
to anyone. Please advise the sender by replying to this e-mail
immediately and then delete the original from your computer.
Opinion : Any opinions expressed in this e-mail are entirely those of
the author and unless specifically stated to the contrary, are not
necessarily those of the author's employer.
Security Warning : Internet e-mail is not necessarily a secure
communications medium and can be subject to data corruption. We advise
that you consider this fact when e-mailing us.
Viruses : We have taken steps to ensure that this e-mail and any
attachments are free from known viruses but in keeping with good
computing practice, you should ensure that they are virus free.
Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU,
United Kingdom
**********************************************************************
More information about the MailScanner
mailing list