Re: Reducing Load on Amavisd-new/Spamassassin/Antivir

From: Roger Grosswiler (roger_at_gwch.net)
Date: 03/02/05

  • Next message: Ryan McDougall: "Re: Screen Locking Problems" 
    Date: Wed, 02 Mar 2005 21:14:32 +0100
To: For users of Fedora Core releases <fedora-list@redhat.com>

    Alexander Dalloz schrieb:
    > Am Mi, den 02.03.2005 schrieb Dale Sykora um 18:00:
    >
    >
    >>Alexander,
    >> This thread caused an idea to pop into my head. What if virus scanners
    >>would digitally sign outgoing messages as virus free such that incoming
    >>mail handlers could verify the message+signatures and not have to scan
    >>for virii? Then active lists like fedora-list could scan once at the
    >>server and all the recipients would only have to check the signature.
    >
    >
    >>Dale
    >
    >
    > The idea is not that bad, to rely on a trusted central virus scanning
    > service. On the other hand, while speaking about mailing list, I would
    > really wish all would catch out virus / worm mails and not let them go
    > through to the subscribers, rather than to just tag them as clean or
    > infected. Red Hat handles this pretty well I feel while for instance
    > through the Cyrus lists spam and I think even worms are getting through.
    > The problem with your idea about tagging mail as clean is that "the bad
    > side" will fake such signatures. So in general it is no good idea to
    > trust mail header tags in general like mail body signature strings.
    > While saying that, I believe to remember that DSPAM is using signatures.
    > But as I never used that tool I can't say how they operate with them and
    > how reliable such a sig is.
    >
    > Alexander
    >
    >
    >
    Hi guys,

    First, thanks a lot for the interest in this thread.

    i remember some times on the samba-list, when some worms where around, i
    had about 75 viruses PER HOUR. And they did not filter anything....

    so, i do my very best to answer all your questions:

    1) i don't use clam, i use antivir (h+b edv)
    2) the machine is a old p3/866 mhz with 128 mb ram only, running fc3 (a
    granny machine...)
    3) mail quantity is about 300-400 per day. Average use is according to
    tload between 0.90 and 3.50 (peaks) avg about 1.3 *ouch*
    4) spamassassin is running as daemon (3 childprocesses)
    5) amavisd-new is running as dameon (3 childprocesses)

    Roger 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Ryan McDougall: "Re: Screen Locking Problems"

    Relevant Pages

    • Re: cDc prepares user-friendly stego app!
      ... > scan the webpage for stegged content using your signature and password. ... > it is more likely to have a virus -- which is simply stupid. ... > about a bunch of lies and innuendo just because you can. ...
      (comp.security.misc)
    • Re: Swen annoyances to everyone: wakeup call
      ... LiveUpdate on 9/19 and 9/20 it indicated no new signature ... >| many mail delivery failure messages can infect you. ... The Sobig.F virus was eventually (after ... >| Sobig.F (or the related mail delivery failure messages). ...
      (microsoft.public.security)
    • Re: Antivirus
      ... ceased to be amazed at the attitude some Windows users seem to have. ... call me in desperation upon having one of those programs let a virus through. ... signature, and hopefully you weren't infected by then. ... And you are at the whims of what the AV vendor defines as a threat. ...
      (Ubuntu)
    • Re: Obtaining a "Faux Virus"?
      ... virus but doesn't act like a virus ... That string was designed for exactly that purpose. ... and most AV programs will have the signature in their ... Dustin Cook [Malware Researcher] ...
      (alt.comp.anti-virus)
    • Re: Reducing Load on Amavisd-new/Spamassassin/Antivir
      ... > server and all the recipients would only have to check the signature. ... The idea is not that bad, to rely on a trusted central virus scanning ... The problem with your idea about tagging mail as clean is that "the bad ... legal statement: http://www.uni-x.org/legal.html Fedora Core 2 GNU/Linux on Athlon with kernel 2.6.10-1.14_FC2smp ...
      (Fedora)
    Loading