Topic: Removing Clamav

[Arno]

Hello,

I would like to remove the Clamav virusscanner  software (pagefault.org) because it made sending E-mails very slow.

Does anyone know howto remove all the packages and set Qmail to it's default settings?

Greets, Arno

[gavin]

I would assume that you reverse the order that you di thigs in in and use rpm -e < PACKAGE - without the extension> to reverse the rpms.

If you followed the steps as per the notes , It should be easy.

I have the same speed issue with my install, However by looking at the /var/log/amavis.log file , I confirmed that the emails are sent to the server, stored as a file and then the file is scanned. After all is ok the mail is sent to qmail or a response back indicating a virus is present is created.

Is that not the purpose of having a virus scanner ??

Everything comes at a cost, I have a Celeron 700 in my server and It causes about a 2 second delay during processing, I can live with that if it means I don't have to continuously fix up workstations.

Hope this helps,
Regards,

Gavin

[Damien Curtain]

Arno wrote:
>
> Hello,
>
> I would like to remove the Clamav virusscanner  software
> (pagefault.org) because it made sending E-mails very slow.
>
> Does anyone know howto remove all the packages and set Qmail
> to it's default settings?

The overhead of a virus scanner should be weighed against the benefit of scanning email for virii passing through your server... it does run perl scripts per e-mail and possibly archiving programs aswell as the virus scanner itself, and there is a memory overhead to be considered, of course using clamdscan minimises some of this memory overhead.

To disable it run:
/sbin/e-smith/db configuration delprop smtpfront-qmail filter
/sbin/e-smith/signal-event email-update

Then remove the rpms. As I've always suggested, buy the service link product if your after performance, reliability and support.

Cheers
--
 Damien

[Arno]

Thanks for the replies! The decision to remove Clamav was caused by a combination of the speed issue and the dissapointing results of the E-mail virus test on: www.gfi.com/emailsecuritytest/ (It failed almost all tests). If the scanning was right than the speed reduction is the price to pay for security.

Greets, Arno