MailScanner Digest, Vol 20, Issue 49

[Glenn Steen]

On 21/08/07, Gareth <list-mailscanner at linguaphone.com> wrote:
> well clamscan is much slower than either the clamavmodule or clamd versions
> so changing to one of those should help speed it up considerably.
>
> Also you are running 0.90 version of clamav which has a bug causing it to
> take much longer to load its signatures which makes the clamscan method even
> slower again.
>
> Upgrading clamav and switching to clamavmodule will probably double your
> scanning speed easily.

With the meager memory resource (256 MiB), I would think that that
would push things into thrashing heavily. Going for clamd (which has a
smaller memory footprint) is likely better.

Cheers
-- Glenn
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
> > [mailto:mailscanner-bounces at lists.mailscanner.info]On Behalf Of Culley
> > Morrow
> > Sent: 21 August 2007 17:37
> > To: mailscanner at lists.mailscanner.info
> > Subject: RE: MailScanner Digest, Vol 20, Issue 49
> >
> >
> > Thanks for the replies. This server is quite meager with 256mb RAM and a
> > 30gb hard drive, all running on a 4 year old Dell desktop. Meager
> > is putting
> > it mildly. I've got to make it work while it's in place, a massive
> > replacement is in the works though.
> >
> > Clamscan was what I was meaning actually. I remember reading a
> > while back in
> > the archives that it was a major stumbling point with new
> > versions on older
> > systems. After an update it was running OK, but slowly getting further and
> > further behind in the mail delivery.
> >
> > Anyway, I'll start digging through the wiki for better rules and
> > see what I
> > can start filtering out.
> >
> > ~={o}=~
> >
> > Culley Morrow
> > IT Manager
> > Geneva Woods Pharmacy
> >
> >
> > -----Original Message-----
> > Message: 11
> > Date: Tue, 21 Aug 2007 09:55:06 +0100
> > From: Greg Matthews <gmatt at nerc.ac.uk>
> > Subject: Re: New Clam, Old, Mailscanner, Ancient Kernel
> > To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> > Message-ID: <46CAA86A.4060206 at nerc.ac.uk>
> > Content-Type: text/plain; charset=windows-1252; format=flowed
> >
> > Culley Morrow wrote:
> > > I ll list out the software versions below and I need a bit of
> > assistance
> > > making them work for now. I know all I need to do is upgrade the kernel
> > > to 2.6 and it all works, but I d like to get them functioning  As-Is
> > > and then do the upgrade so I have something working to fall back on.
> > > Clam AV is currently shut off since clamd as a service was so slow.
> >
> > kernel upgrade probably not very important. As others have pointed out,
> > there is little reason not to upgrade MS and SA. Stick as much memory in
> > the box as it can handle.
> >
> > > Kernel 2.4.18-bf2.4
> > >
> > > Mailscanner 3.27.1-1
> > >
> > > Clam AV 0.90.1-3etch3
> > >
> > > Spam Assassin 2.64-1
> > >
> > >
> > >
> > > Currently we are inundated with mass spam and I need to get some AV in
> > > place, be it Clam or another GNU/GPL/ free as in beer -ware. I need a
> > > hand here if anyone wants to chime in.
> >
> > if you are "inundated" then the best start you can make is to reject as
> > much as possible at the MTA. As this is Debian, your MTA is probably
> > (but not necessarily) exim. Look at putting in a single well regarded
> > block list at the MTA, something like zen.spamhaus.org but do your
> > research and find one that /you/ like the look of (block list
> > preferences can start flame wars!). Make sure you are rejecting mail at
> > the MTA for all unknown recipients and not accepting then bouncing. Set
> > up your MTA to throttle incoming mail so it doesnt get overwhelmed or
> > let your incoming queue build up uncontrollably.
> >
> > Visit the MS wiki for tips on how to do this - dig deep, it can be a bit
> > tricky to find what you are looking for. Search the archives for good
> > links into the wiki.
> >
> > GREG
> > --
> > Greg Matthews           01491 692445
> > Head of UNIX/Linux, iTSS Wallingford
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> >
> >
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>


-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se