OT: Re: How many people to admin a Cyrus system?

[Scott M. Likens]

Ian,

The only problem with using clamav-filter (or something appropriate) as 
a milter, etc.  Was it did not fall into what Zimbra designed. Quite 
frankly I think it would have been a lot smoother with 
Sendmail+Milter+Clamav+whatever else they wanted.

However, that is not the direction they picked, either for licensing or 
whatever.

One thing with Zimbra, is you don't exactly get to pick what you want.  
They throw a ball of software at you, and expect you to work with it. 

I admit, if I didn't review their code as much, and try and see how it 
worked.  I would have been more oblivious and pleased with Zimbra maybe.

Scott

Ian G Batten wrote:
> On 13 Nov 07, at 1335, Adam Tauno Williams wrote:
>
>   
>>> 3. Can't handle high load very well, in fact it handles load  
>>> horribly.
>>>       
>> I have a friend who works at a small shop who reports exactly the same
>> issue with Zimbra, s..ll...ooo..wwww...
>>
>>     
>>> 3) ClamAV.  Do note how much email I said we dealt with a minute.  We
>>> didn't get a great deal of email.  Maybe 2000 email a day?  Not  
>>> overly
>>> much.  However as the ClamAV database would grow, if you restarted
>>> ClamAV or Zimbra eventually it would take too long for ClamAV to  
>>> start
>>> and would not listen on the port assigned and would make mail fail to
>>> deliver.  (Ouch huh?)
>>>       
>> In defense of CLAMAV I can say that we run it on our SMTP server  
>> (not on
>> the IMAP or groupware server which seems like a bad idea).  It works
>> well and is pretty stable.  If your CLAMAV was causing you this  
>> problem
>> then Zimbra must have boloxed the setup or you just had a bad version.
>>     
>
> Clamav-milter works very well for sendmail shops, without any amavis  
> involvement at all.  The slow startup bug is an artefact of one  
> particular release: it now comes up in about 15 seconds.  Once it's  
> running it's perfectly rapid enough to cope with our complete  
> internal load.    clamd-milter can do the parsing of archives,  
> breaking up of MIME etc at least as well as amavisd.
>
> If you don't have an equivalent to clamav-filter for your MTA of  
> choice, then you need to make sure that you start clamd, and then  
> pass the material to be scanned with clamdscan (note the d).  clamd  
> will need to be running as a user that can read the temporary files,  
> because the best way to use clamd is to pass filenames over the  
> AF_UNIX domain socket.
>
> We in fact run clamav-milter with its built-in clamd support, for  
> reasons I can't offhand remember.  So we fire up clamd, then clamav- 
> milter, then clamav-milter passes temporary files to clamd.
>
> If you have to use amavisd, make sure you tell it to use clamdscan  
> rather than clamscan.  The latter does indeed take 10 seconds to fire  
> up.
>
> clamd likes large pages, Solaris fans.
>
> Our milter startup script: there is some local stuff in there.
>
> #!/bin/sh
>
> case "$1" in
> start) mv /var/clamav/clamd.log /var/clamav/clamd.log.old
>        LD_PRELOAD=mpss.so.1
>        MPSSHEAP=4M
>        MPSSSTACK=64K
>         export LD_PRELOAD MPSSHEAP MPSSSTACK
>        newtask -p clam /usr/local/sbin/clamd
>        attempt=1
>        sleep=5
>        while [ $attempt -lt 5 ]; do
>           if /usr/local/bin/clamdscan /etc/termcap; then
>              break
>           else
>              attempt=`expr $attempt + 1`
>              sleep=`expr $sleep + 5`
>              echo sleeping for $sleep seconds, attempt $attempt
>              sleep $sleep
>           fi
>        done
>
> #      --postmaster=igb at ftel.co.uk \
> #      --postmaster-only \
>
>        newtask -p milter /usr/local/sbin/clamav-milter \
>        --dont-blacklist=`/usr/local/bin/fujitsuhosts` \
>        --noreject \
>        --dont-wait \
>        --local \
>        --outgoing \
>        --quiet \
>        --external \
>        --pidfile=/var/clamav/milter.pid \
>        --whitelist-file=/etc/mail/clamav-whitelist \
>        inet:2010
>
>        newtask -p spam /usr/perl5/bin/spamd -s local6 -u spamd -x -d  
> --pidfile=/var/run/spamd.pid
>        su spamd << \ZZZ
>        newtask -p milter /usr/local/sbin/spamassassin_milter -p inet: 
> 2002 &
> ZZZ
>        newtask -p milter /usr/local/sbin/mailarchive -u archive -p  
> inet:4001
>        newtask -p milter /usr/local/sbin/spamtrap -u spamtrap -p inet: 
> 4000
>
>        ;;
> stop) for i in /var/clamav/milter.pid /var/run/spamd.pid; do
>           test -f $i && kill `cat $i`
>        done
>        pkill -u spamd
>        pkill -u clamav
>        pkill -u archive
>        pkill -u spamtrap
>        ;;
> esac
>
>
>
>
>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>
>
> !DSPAM:4739ffa181401346466276!
>
>
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20071113/6ee06750/attachment-0001.html