Mailing List Archive: ClamAV: users

What is prefered option: TCPSocket or LocalSocket?

Index | Next | Previous | View Threaded

arturs at netvision

Jun 4, 2006, 5:22 AM

Post #1 of 3 (2915 views)
Permalink

What is prefered option: TCPSocket or LocalSocket?

Hi,

This is my first installation of clamav.
Clamav will be used as a sendmail milter.

What is prefered: working with TCPSocket or with LocalSocket?

What is faster?
Are there any implications?

Thank you.

Best,

--
Arthur Sherman

+972-52-4878851
CPTeam

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

dennispe at inetnw

Jun 4, 2006, 10:04 AM

Post #2 of 3 (2729 views)
Permalink

Re: What is prefered option: TCPSocket or LocalSocket? [In reply to]

Arthur Sherman wrote:
> Hi,
>
> This is my first installation of clamav.
> Clamav will be used as a sendmail milter.
>
> What is prefered: working with TCPSocket or with LocalSocket?
>
> What is faster?
> Are there any implications?
>

TCP sockets tend to be slower than Unix sockets when opening and closing
them. If you're going to have a central AV server that services several
mail servers, you have to use TCP sockets. If the process that calls the
AV scanner is on the same system as the scanner it probably can be
argued that TCP sockets are not advantageous between these processes.

If you use TCP sockets you should block them in your firewall so
non-local systems cannot access them, or bind the process to the
localhost interface.

If you have an eight-way MP system with 16g of ram you probably don't
need to worry about it.

dp
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

arturs at netvision

Jun 4, 2006, 10:20 AM

Post #3 of 3 (2745 views)
Permalink

RE: What is prefered option: TCPSocket or LocalSocket? [In reply to]

> TCP sockets tend to be slower than Unix sockets when opening
> and closing
> them. If you're going to have a central AV server that
> services several
> mail servers, you have to use TCP sockets. If the process
> that calls the
> AV scanner is on the same system as the scanner it probably can be
> argued that TCP sockets are not advantageous between these processes.
>
> If you use TCP sockets you should block them in your firewall so
> non-local systems cannot access them, or bind the process to the
> localhost interface.
>
> If you have an eight-way MP system with 16g of ram you probably don't
> need to worry about it.
>
> dp

All right, thank you for this.

Best,

--
Arthur Sherman

+972-52-4878851
CPTeam

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads