<html dir="ltr"><head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style>@page Section1 {margin: 72.0pt 90.0pt 72.0pt 90.0pt; }
P.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"
}
LI.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"
}
DIV.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"
}
A:link {
COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.EmailStyle17 {
COLOR: windowtext; FONT-FAMILY: Arial
}
DIV.Section1 {
}
</style>
<meta content="MSHTML 6.00.2800.1595" name="GENERATOR">
<style title="owaParaStyle">P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
</style>
</head>
<body lang="EN-US" vlink="purple" link="blue" ocsi="x">
<div style="DIRECTION: ltr"><font face="Tahoma" size="2">Which version of clam are you using? Are you using clamavmodule or clam or clamd in your mailscanner.conf file?</font></div>
<div style="DIRECTION: ltr"><font face="Tahoma" size="2"></font> </div>
<div style="DIRECTION: ltr"><font face="Tahoma" size="2">Jason</font></div>
<div style="DIRECTION: ltr">
<hr tabindex="-1">
</div>
<div style="DIRECTION: ltr"><font face="Tahoma" size="2"><b>From:</b> mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Alistair Carmichael [Alistair.Carmichael@ntltravel.com]<br>
<b>Sent:</b> 26 June 2007 09:30<br>
<b>To:</b> mailscanner@lists.mailscanner.info<br>
<b>Subject:</b> Mailscanner message delays / load issue<br>
</font><br>
</div>
<div></div>
<div>
<div class="Section1">
<p class="MsoNormal"><font face="Arial" size="2"><span lang="EN-GB" style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Hi,</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span lang="EN-GB" style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"></span></font> </p>
<p class="MsoNormal"><font face="Arial" size="2"><span lang="EN-GB" style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Over the past few months we have noticed a steady increase in the load on our 2 mail scanner servers and in the last few days messages have been
substantially delayed between being collected from the inbound mailqueue to the outbound mailqueue. We are running mailscanner version mailscanner-4.53.8-1 on centos running linux kernel 2.6.9-55 and using sendmail 8.13 as the MTA and clamav as the anti-virus
software and spamassassin as the anti spam software.</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span lang="EN-GB" style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">We receive approximately 30,000 messages each day which are handled by a cluster of 2 servers via DNS round robin, the load on both machines is steadily
at about 5,5,5 with clamscan processes constantly being at the top of the process list in terms of cpu usage. We are also seeing log entries similar to this constantly appearing in the maillog.</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span lang="EN-GB" style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">MailScanner[31171]: Commercial scanner clamav timed out!</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span lang="EN-GB" style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">MailScanner[31171]: Virus Scanning: Denial Of Service attack is in message l5Q7bntD008994</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span lang="EN-GB" style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Both servers are high powered machines only running the mailscanner software (xeon 2.8 cpu and 2gb ram in each machine)</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span lang="EN-GB" style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Is there a reason that the load would be so high as there’s not a huge quantity of email going through the servers for what I would expect them to
handle, or if there are any configuration tuning that can be done in mailscanner to resolve this (we’ve fine tuned the time out settings in sendmail to minimise message delays but this hasn’t lowered the load or message delivery time)</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span lang="EN-GB" style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"></span></font> </p>
<p class="MsoNormal"><font face="Arial" size="2"><span lang="EN-GB" style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Thanks for any help</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span lang="EN-GB" style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Al</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"></span></font> </p>
</div>
<br>
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential
information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.
</div>
</body>
</html>