From: Leonardo Rodrigues (no email)
Date: Thu Aug 01 2002 - 08:19:47 EDT
Which amavis version have you used ??? Which antivirus were amavis using
? I'm using amavisd snapshot20020300 ( not the newest one ), and it has some
features to handle decompression exploits. I'm using McAfee VirusScan using
the dailydat virus definition ( updated once a day ). Here some variables
from /etc/amavisd.conf:
# The next three are resource limitations - exit with EX_TEMPFAIL if
exceeded
# Maximum recursion level for extraction/decoding
$MAXLEVELS = 3;
# Maximum nesting level for compressing archive formats
$MAX_ARCHIVE_NESTING = 3;
# Maximum number of extracted files
$MAXFILES = 500;
I agree that amavis seems not to be the most effective on cpu usage.
I've also got situations where machine almost died on high traffic. This can
be somehow avoided limiting the maximum parallel numbers of scanning. Yes,
this will delay message delivering on high traffic moments, but wont
probably kill the machine ....
Sincerily,
Leonardo Rodrigues
----- Original Message -----
From: "Graham Hillstomer" <>
To: <>
Sent: Tuesday, July 30, 2002 6:48 PM
Subject: Re: Any larger scale Postfix anti-virus sites ?
> Amavis - is good for low volume sites but is very high on CPU and failed
the ZIP-KILLER tests. This is a ZIP file that has 10,000 layers that expands
to 1GB. It caused our server to stop. Could not handle large burst traffic
effectively. Depends on 3rd application support which all consume CPU
>
-
To unsubscribe, send mail to with content
(not subject): unsubscribe postfix-users
|
|
|