Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: ClamAV: users

qmail + ClamAV questions

 

 

ClamAV users RSS feed   Index | Next | Previous | View Threaded


jesse at wingnet

Sep 3, 2003, 7:40 AM

Post #1 of 4 (240 views)
Permalink
qmail + ClamAV questions

Howdy list,

My operating system is FreeBSD 4.8-RELEASE (and 5.1-RELEASE
on my devel box).

I'm currently running qmail + qmail-scanner + ClamAV, and
I'm wondering if I should be using AmaVis? I'd appreciate
it if anyone running ClamAV and qmail would share their
experience with the scanner they chose (i.e. qmail-scanner,
AmaVis, other) and why they chose it.

I chose to go with qmail-scanner because the AmaVis project
appears to be fragmented. I see a lot of subprojects, like
AmaVis-ng, amavisd, etc...

Also, I'm familiar with QMAILQUEUE at this point, and I
thought I'd go with what I know. But now I'm starting to
wonder if a daemonized scanner might give me better
performance.

Looking forward to hearing everyone's thoughts on the matter!
Thanks.

--
Jesse Guardiani, Systems Administrator
WingNET Internet Services,
P.O. Box 2605 // Cleveland, TN 37320-2605
423-559-LINK (v) 423-559-5145 (f)
http://www.wingnet.net


slim at ala

Sep 3, 2003, 8:40 AM

Post #2 of 4 (232 views)
Permalink
RE: qmail + ClamAV questions [In reply to]

::Howdy list,
::
::My operating system is FreeBSD 4.8-RELEASE (and 5.1-RELEASE
::on my devel box).
::
::I'm currently running qmail + qmail-scanner + ClamAV, and
::I'm wondering if I should be using AmaVis? I'd appreciate
::it if anyone running ClamAV and qmail would share their
::experience with the scanner they chose (i.e. qmail-scanner,
::AmaVis, other) and why they chose it.
::
::I chose to go with qmail-scanner because the AmaVis project
::appears to be fragmented. I see a lot of subprojects, like
::AmaVis-ng, amavisd, etc...
::
::Also, I'm familiar with QMAILQUEUE at this point, and I
::thought I'd go with what I know. But now I'm starting to
::wonder if a daemonized scanner might give me better
::performance.
::
::Looking forward to hearing everyone's thoughts on the matter!
::Thanks.

Jesse,

We are an ISP in South Alabama that is using a combination of qmail/vpopmail
+ ClamAV + spamassassin tied together with maildrop at the users .qmail
level (under FBSD 4.8).

We didn't want to do scanning on all email due to the amount of email we
process daily (500K+ messages a day). We also wanted to allow the customers
a certain level of control over spamassassin (user defined scores from
mysql).

I have several scripts (both maildrop and shell scripts for wrapping
clamscan into maildrop) available if you are interested.

I know this isn't exactly what you had asked, but I was offering it up as an
alternative method for doing the scanning and filtering without resorting to
QMAILQUEUE or other external methods (i.e. more perl overhead).

Tom Walsh
Network Administrator
http://www.ala.net/


franco at gasperino

Sep 3, 2003, 9:32 AM

Post #3 of 4 (234 views)
Permalink
Re: qmail + ClamAV questions [In reply to]

On Wednesday 03 September 2003 08:40 am, Tom Walsh wrote:
> Jesse,
>
> We are an ISP in South Alabama that is using a combination of
> qmail/vpopmail + ClamAV + spamassassin tied together with maildrop at the
> users .qmail level (under FBSD 4.8).
>
> We didn't want to do scanning on all email due to the amount of email we
> process daily (500K+ messages a day). We also wanted to allow the customers
> a certain level of control over spamassassin (user defined scores from
> mysql).
>
> I have several scripts (both maildrop and shell scripts for wrapping
> clamscan into maildrop) available if you are interested.
>
> I know this isn't exactly what you had asked, but I was offering it up as
> an alternative method for doing the scanning and filtering without
> resorting to QMAILQUEUE or other external methods (i.e. more perl
> overhead).

Take a look at http://projects.gasperino.org/scrubber/ . This can solve your
performance problem using qmail and my program group called scrubber. Take a
look at the filter-clamav plugin. I also have a bayesian filter plugin that
you can use with a little work on your part.

It can handle over a million messages per day on a small system w/o any
issues.

--

Franco


jesse at wingnet

Sep 3, 2003, 10:52 AM

Post #4 of 4 (231 views)
Permalink
RE: qmail + ClamAV questions [In reply to]

Tom Walsh wrote:

> ::Howdy list,
> ::
> ::My operating system is FreeBSD 4.8-RELEASE (and 5.1-RELEASE
> ::on my devel box).
> ::
> ::I'm currently running qmail + qmail-scanner + ClamAV, and
> ::I'm wondering if I should be using AmaVis? I'd appreciate
> ::it if anyone running ClamAV and qmail would share their
> ::experience with the scanner they chose (i.e. qmail-scanner,
> ::AmaVis, other) and why they chose it.
> ::
> ::I chose to go with qmail-scanner because the AmaVis project
> ::appears to be fragmented. I see a lot of subprojects, like
> ::AmaVis-ng, amavisd, etc...
> ::
> ::Also, I'm familiar with QMAILQUEUE at this point, and I
> ::thought I'd go with what I know. But now I'm starting to
> ::wonder if a daemonized scanner might give me better
> ::performance.
> ::
> ::Looking forward to hearing everyone's thoughts on the matter!
> ::Thanks.
>
> Jesse,
>
> We are an ISP in South Alabama that is using a combination of
> qmail/vpopmail + ClamAV + spamassassin tied together with maildrop at the
> users .qmail level (under FBSD 4.8).
>
> We didn't want to do scanning on all email due to the amount of email we
> process daily (500K+ messages a day). We also wanted to allow the
> customers a certain level of control over spamassassin (user defined
> scores from mysql).
>
> I have several scripts (both maildrop and shell scripts for wrapping
> clamscan into maildrop) available if you are interested.

Yes please, for both.

We run a similar setup: qmail + vpopmail + Courier IMAP + sqwebmail + maildrop.
But maildrop isn't currently accessible to normal users. I just use it for
staff IMAP accounts.

I _like_ QMAILQUEUE for it's flexibility. In fact, have a custom Python
filtering script that I wrote for special purposes which does a great
job under QMAILQUEUE. However, my Python script is highly optimized
for the task at hand, and I'm not sure I can say the same about qmail-scanner.

Also I'm not too keen on running Perl in the qmail-queue "pipeline". Firstly,
I don't particularly care for Perl as a language (even though I frequently
use it for many Sys Admin scripts), and secondly, I'd rather keep the number
of interpretted, low level mail server filtering scripts to a minimum.

My manager has also expressed interest in "selective" virus protection,
perhaps on a per domain or even a per user basis.

Anyway, I'd love to see what you've got. Thanks!

--
Jesse Guardiani, Systems Administrator
WingNET Internet Services,
P.O. Box 2605 // Cleveland, TN 37320-2605
423-559-LINK (v) 423-559-5145 (f)
http://www.wingnet.net

ClamAV users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.