Re: OT: Re: How many people to admin a Cyrus system?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ian,

The only problem with using clamav-filter (or something appropriate) as a milter, etc.  Was it did not fall into what Zimbra designed. Quite frankly I think it would have been a lot smoother with Sendmail+Milter+Clamav+whatever else they wanted.

However, that is not the direction they picked, either for licensing or whatever.

One thing with Zimbra, is you don't exactly get to pick what you want.  They throw a ball of software at you, and expect you to work with it. 

I admit, if I didn't review their code as much, and try and see how it worked.  I would have been more oblivious and pleased with Zimbra maybe.

Scott

Ian G Batten wrote:
On 13 Nov 07, at 1335, Adam Tauno Williams wrote:

  
3. Can't handle high load very well, in fact it handles load  
horribly.
      
I have a friend who works at a small shop who reports exactly the same
issue with Zimbra, s..ll...ooo..wwww...

    
3) ClamAV.  Do note how much email I said we dealt with a minute.  We
didn't get a great deal of email.  Maybe 2000 email a day?  Not  
overly
much.  However as the ClamAV database would grow, if you restarted
ClamAV or Zimbra eventually it would take too long for ClamAV to  
start
and would not listen on the port assigned and would make mail fail to
deliver.  (Ouch huh?)
      
In defense of CLAMAV I can say that we run it on our SMTP server  
(not on
the IMAP or groupware server which seems like a bad idea).  It works
well and is pretty stable.  If your CLAMAV was causing you this  
problem
then Zimbra must have boloxed the setup or you just had a bad version.
    

Clamav-milter works very well for sendmail shops, without any amavis  
involvement at all.  The slow startup bug is an artefact of one  
particular release: it now comes up in about 15 seconds.  Once it's  
running it's perfectly rapid enough to cope with our complete  
internal load.    clamd-milter can do the parsing of archives,  
breaking up of MIME etc at least as well as amavisd.

If you don't have an equivalent to clamav-filter for your MTA of  
choice, then you need to make sure that you start clamd, and then  
pass the material to be scanned with clamdscan (note the d).  clamd  
will need to be running as a user that can read the temporary files,  
because the best way to use clamd is to pass filenames over the  
AF_UNIX domain socket.

We in fact run clamav-milter with its built-in clamd support, for  
reasons I can't offhand remember.  So we fire up clamd, then clamav- 
milter, then clamav-milter passes temporary files to clamd.

If you have to use amavisd, make sure you tell it to use clamdscan  
rather than clamscan.  The latter does indeed take 10 seconds to fire  
up.

clamd likes large pages, Solaris fans.

Our milter startup script: there is some local stuff in there.

#!/bin/sh

case "$1" in
start) mv /var/clamav/clamd.log /var/clamav/clamd.log.old
       LD_PRELOAD=mpss.so.1
       MPSSHEAP=4M
       MPSSSTACK=64K
        export LD_PRELOAD MPSSHEAP MPSSSTACK
       newtask -p clam /usr/local/sbin/clamd
       attempt=1
       sleep=5
       while [ $attempt -lt 5 ]; do
          if /usr/local/bin/clamdscan /etc/termcap; then
             break
          else
             attempt=`expr $attempt + 1`
             sleep=`expr $sleep + 5`
             echo sleeping for $sleep seconds, attempt $attempt
             sleep $sleep
          fi
       done

#      --postmaster=igb@xxxxxxxxxx \
#      --postmaster-only \

       newtask -p milter /usr/local/sbin/clamav-milter \
       --dont-blacklist=`/usr/local/bin/fujitsuhosts` \
       --noreject \
       --dont-wait \
       --local \
       --outgoing \
       --quiet \
       --external \
       --pidfile=/var/clamav/milter.pid \
       --whitelist-file=/etc/mail/clamav-whitelist \
       inet:2010

       newtask -p spam /usr/perl5/bin/spamd -s local6 -u spamd -x -d  
--pidfile=/var/run/spamd.pid
       su spamd << \ZZZ
       newtask -p milter /usr/local/sbin/spamassassin_milter -p inet: 
2002 &
ZZZ
       newtask -p milter /usr/local/sbin/mailarchive -u archive -p  
inet:4001
       newtask -p milter /usr/local/sbin/spamtrap -u spamtrap -p inet: 
4000

       ;;
stop) for i in /var/clamav/milter.pid /var/run/spamd.pid; do
          test -f $i && kill `cat $i`
       done
       pkill -u spamd
       pkill -u clamav
       pkill -u archive
       pkill -u spamtrap
       ;;
esac





----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


!DSPAM:4739ffa181401346466276!


  

----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux