James at kyzo
Feb 13, 2004, 10:41 AM
Post #1 of 1
(394 views)
Permalink
|
In case you didn't know: "nclamd" is a re-write of "clamd" what uses
pre-forking instead of threads and ripMIME instead of the libclamav MIME
decoder - however, it uses the most excellent "libclamav" library to do
the actual scanning - i.e. its built on the same engine & database, just
implements a different interface to the user. Its faster and has been
much more stable than "clamd". You must use "nclamdscan" and
"nclamav-milter" when using "nclamd".
I have just posted a new release of "nclamd". I checked that it works
with the new libclamav in 0.66 and it all seems fine - after one minor
code change.
The new release also supports reading the "/usr/local/etc/clamav.conf"
options file. Some of the options it supports are the same as "clamd",
some are mapped and some are different. These are the options that
"nclamd" supports :-
"MinChild", "MaxChild", "AnswerBeforeDie", "DatabaseCheckInterval",
"DataDirectory", "LocalSocket", "AdminName", "EmailDomain",
"NotifyAdmin", "NotifyRcpt", "NoNotifyAdmin", "NoNotifyRcpt",
"NoLogStdOut", "NoLogSyslog", "LogStdOut", "LogSyslog", "Verbose",
"FixStaleSocket", "MaxThreads", "Foreground",
"SMTPServer", "SMTPReject", "Debug", "ScanArchive", "NoScanArchive",
"ArchiveMaxFileSize", "ArchiveMaxRecursion", "PidFile",
Right now I don't have the time to explain what they all mean (if you
can't guess) but I will post again later (may be Sunday, probably Monday).
http://www.kyzo.com/nclamd/
FYI: we now have 50 customers using "nclamd" (one site gets over 3000
e-mail a day) and, so far, it has only missed one virus over all the
sites. Currently we don't know why it was missed as it appears to have
been in the database at the time. It may be because we're not running
0.65 or 0.66, but a very old version - a modified copy of release
20030720, because it is really stable and doesn't leak too much.
We're planning an update once we have tested this code further. We
generated a bit of bad feeling with our customers when we first shipped
ClamAV because it was so unstable, this is why I wrote "nclamd", hence
we're in no hurry to upgrade just yet.
James
|
