From: "Steven Levine" <ecs-isp@2rosenthals.com>
Message-ID: <656b65ca.4.mr2ice.fgrirsq@earthlink.net>
Date: Sat, 02 Dec 2023 09:13:46 -0800
To: "eCS ISP Mailing List" <ecs-isp@2rosenthals.com>
In-Reply-To: <list-8670038@2rosenthals.com>
Subject: Re: [eCS-ISP] clamscan issue

In <list-8670038@2rosenthals.com>, on 12/02/23
   at 10:20 AM, "Massimo S." <ecs-isp@2rosenthals.com> said:

Hi Massimo,

>on the 2nd MTA i've VAL to 3072 and clamscan don't give issues but it's
>true also that it scan only 7 mail domains

I suspect there are several issues here. One is the number files to be
scanned and the other is the size of the files to be scanned.  The third
is memory fragmentation which may be the most important factor for us. 
The change we made to how clam handled memory reduced the fragmentation
significantly, but I don't think it fully eliminated it.

The only current solution we have for fragmentation is to reduce the
number files processed by a clamscan run.

>i already have some exclusions e.g. for msglist.dat, domain.tni, etc.

Have you tried scanning by user rather than by domain?

>in my experience VAL 3072 gives issues in some setups

This is true, but for you the only systems that matter are yours.

>is there another suggested value?
>(more than 2560 and before 3072)

Unfortunately, no.  VAL rounds values to 512MB multiples because of how
paging works.

Steven

-- 
----------------------------------------------------------------------
"Steven Levine" <steve53@earthlink.net>  Warp/DIY/BlueLion etc.
www.scoug.com www.arcanoae.com www.warpcave.com
----------------------------------------------------------------------