From owner-freebsd-isp@FreeBSD.ORG Thu Feb 15 18:12:30 2007 Return-Path: X-Original-To: freebsd-isp@freebsd.org Delivered-To: freebsd-isp@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id BD75C16A4F6 for ; Thu, 15 Feb 2007 18:12:30 +0000 (UTC) (envelope-from lists@stringsutils.com) Received: from zoraida.natserv.net (p65-147.acedsl.com [66.114.65.147]) by mx1.freebsd.org (Postfix) with ESMTP id 795DB13C442 for ; Thu, 15 Feb 2007 18:12:30 +0000 (UTC) (envelope-from lists@stringsutils.com) Received: from zoraida.natserv.net (localhost.natserv.net [127.0.0.1]) by zoraida.natserv.net (Postfix) with ESMTP id BF6CBC2F2 for ; Thu, 15 Feb 2007 13:12:29 -0500 (EST) Received: by zoraida.natserv.net (Postfix, from userid 58) id 86CB9C2EE; Thu, 15 Feb 2007 13:12:29 -0500 (EST) X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on zoraida.natserv.net X-Spam-Level: X-Spam-Status: No, score=1.0 required=4.0 tests=RCVD_IN_FIVETENSRC,SPF_PASS autolearn=disabled version=3.1.7 X-Spam-Report: * -0.0 SPF_PASS SPF: sender matches SPF record * 1.0 RCVD_IN_FIVETENSRC RBL: Received via a relay in Five Ten block list * [66.114.65.147 listed in blackholes.five-ten-sg.com] Received: from zoraida.natserv.net (zoraida.natserv.net [66.114.65.147]) by zoraida.natserv.net (Postfix) with ESMTP id 89F6BC163; Thu, 15 Feb 2007 13:12:22 -0500 (EST) References: <20070215174129.GB20210@e-Gitt.NET> Message-ID: X-Mailer: http://www.courier-mta.org/cone/ From: Francisco Reyes To: Oliver Brandmueller Date: Thu, 15 Feb 2007 13:12:22 -0500 Mime-Version: 1.0 Content-Type: text/plain; format=flowed; charset="US-ASCII" Content-Disposition: inline Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV using ClamSMTP Cc: FreeBSD ISP Subject: Re: Clamav replacement for FreeBSD+postfix? X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Feb 2007 18:12:30 -0000 Oliver Brandmueller writes: > We're using clamav (clamd, together with exim) in our setup. Our setup > consisting of currently four servers assigned to this task is processing > around one million deliveries per day, around 3.5 million rejects in the :-) You get less spam than we do. We also get around 4 Million emails per day, but only about 500K are accepted. (last I checked.. may be more volume now) > clamd processes, but for several months this setup is quite stable now. I had one machine that had been stable for months. Yesterday it just simply stopped working. Upgraded to the latest clamav. Even worse. Copied another version (older) from another machine. Working again. > We're using FreeBSD 6, amd64. Servers have 4 GB of RAM, we needed to We are using FreeBSD 6 i386. Do you see better perfomance on the amd64 branch for this type of work? > tune a bit in the config files of clamd so that it's leveld fine with > our load. Hm.. that config file is not that big. What variables did you set that were helpfull? In particular no matter what I do I never see more than 4 threads running. > Also we use it successfully with libthr instead of libpthred > (through libmap.conf). What was the procedure for that? Any pointers to docs appreciated. I am looking at /etc/libmap.conf, is it just an entry there? Wouldn't that be global? So all programs in the machine will use libthr instead of libpthred? > At least for a recent 6-STABLE, recent clamav and the given configs I > cannot agree with you on missing stability. Only thing I have not tried is amd64 and libthr. However I am wondering if a process based virus scanner exists. Going over ports I see a handfull of virus scanners. I guess I will have to setup a test machine and try them. I suspsect the issue is FreeBSD's thread support, so your suggested thread library change may help until we find a process based antivirus (if there is one that works well with FreeBSD).