On Wednesday, December 20 at 11:21 PM, quoth Erwin Hoffmann:
You are joking. If you've looked into the code, you can see, logging
to STDERR is broken.
Ah, my mistake. I have this in my config file:
LogFile /dev/fd/1
And it works quite well (I am using the Debian packaged version of
ClamAV, but I don't believe they use any patches).
b) clamd + clamdscan needs some attention -- once clamd is blocked
the whole qmail-smtpd is blocked,
Depends on your solution. It's quite possible for qscanq or simscan to
implement a timeout if they wanted to.
c) one has to take care about regular ClamAV updates; there *are*
significant changes in the virus detection sections. There is no clean
scheme in ClamAV which minor releases are due to "simple" fixes or
significant changes in the scan engine.
Very true.
d) Due to that, pre-packaged ClamAV solutions (a la Debian) are too slow to
(re-)act on version changes. A prinicipally good idea turns into the opposite.
I use Debian-volatile, which has fresh ClamAV versions out within a
few days of their release.
~Kyle
--
To announce that there must be no criticism of the President, or that
we are to stand by the President, right or wrong, is not only
unpatriotic and servile, but is morally treasonable to the American
public.
-- Theodore Roosevelt, 1912
pgpnuoRXOYjpt.pgp
Description: PGP signature
|