MailScanner / Clam .. (grrrr)

[Rick Cooper]

 > -----Original Message-----
 > From: mailscanner-bounces at lists.mailscanner.info 
 > [mailto:mailscanner-bounces at lists.mailscanner.info] On 
 > Behalf Of Rob Poe
 > Sent: Friday, June 15, 2007 2:34 AM
 > To: mailscanner at lists.mailscanner.info
 > Subject: MailScanner / Clam .. (grrrr)
 > 
 > Well, I've finally figured out on the boxes that the 
 > Mail::ClamAV won't install with CPAN -- how to get them to 
 > install via RPM (not exactly a fun time figuring that out) 
 > .. the DAG repo for Centos is where I got everything (they 
 > have the perl-mail-clamav module, the perl-inline-perl, and 
 > obviously the clamav).
 > 
 > now, however, when MailScanner is starting, it takes a 
 > LOOOOOOOOONNNNNNNG time to get the children to start.  
 > 
 > (on the order of 5 minutes)
 > 
 > the MailScanner --lint isn't that slow though..
 > 
 > output from top looks something like ...
 > 
 > 
 > 16477 root      25   0 65128  63M  3688 R    20.6  2.5   
 > 0:17   0 MailScanner
 > 16498 root      25   0 64908  63M  3684 R    19.6  2.5   
 > 0:13   0 MailScanner
 > 16503 root      25   0 64684  63M  3684 R    19.6  2.5   
 > 0:10   0 MailScanner
 > 16506 root      25   0 63748  62M  3684 R    19.6  2.4   
 > 0:08   0 MailScanner
 > 16510 root      25   0 60668  59M  3680 R    19.6  2.3   
 > 0:07   0 MailScanner
 > 
 > But once it's started, it works a treat
 > 
 > Jun 15 01:32:03 mail MailScanner[16477]: 
 > ClamAVModule::INFECTED:: Eicar-Test-Signature:: 
 > ./l5F6T5xE016496/msg-16477-1.txt 
 > 

Supposedly they have fixed the long load time with the current clamav rcx
version. Bear im mind when you use clamavmodule you are loading the database
and basically becoming a clamd. Thus if libclamav has a long load each of
your children will also have a long load  (although 5 min is WAY longer than
I have heard of).

Try commenting out the clamavmodule from your scanner list and see if the
load times come down.

Rick


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.