Enhancement #3141

Optimize clamd limits for performance

Added by Filippo Carletti over 6 years ago. Updated about 6 years ago.

Status:CLOSEDStart date:
Priority:NormalDue date:
Assignee:-% Done:

100%

Category:nethserver-antivirus
Target version:v6.6
Resolution: NEEDINFO:No

Description

clamd.conf could be slightly optimized to enhance scan performances a bit.

HeuristicScanPrecedence yes
MaxConnectionQueueLength 30
MaxFiles 1000
MaxFileSize 30M 
MaxRecursion 5
MaxScanSize 48M 

Associated revisions

Revision 92fcad03
Added by Filippo Carletti over 6 years ago

clamd.conf: Broken exe default to no and minor tuning. Refs #3141

History

#1 Updated by Filippo Carletti over 6 years ago

I found some false positives in web antivirus scanner logs, where some windows updates where detected as Broken.Executable.
I'd change to:

DetectBrokenExecutables no

which is the default.

#2 Updated by Filippo Carletti over 6 years ago

  • Status changed from NEW to TRIAGED
  • % Done changed from 0 to 20

#3 Updated by Filippo Carletti over 6 years ago

  • Status changed from TRIAGED to ON_DEV
  • Assignee set to Filippo Carletti
  • % Done changed from 20 to 30

#4 Updated by Filippo Carletti over 6 years ago

  • Status changed from ON_DEV to MODIFIED
  • Assignee deleted (Filippo Carletti)
  • % Done changed from 30 to 60
Package in nethserver-testing:
  • nethserver-antivirus-1.1.2-1.7.ga8d7b94.ns6.noarch.rpm

Check that /etc/clamd.conf is changed according to the following diff:

35c35
< DetectBrokenExecutables yes
---
> DetectBrokenExecutables no
41a42,49
> # optimizations
> HeuristicScanPrecedence yes
> MaxConnectionQueueLength 30
> MaxFiles 1000
> MaxFileSize 30M 
> MaxRecursion 5
> MaxScanSize 48M 

#5 Updated by Filippo Carletti over 6 years ago

  • Status changed from MODIFIED to ON_QA
  • % Done changed from 60 to 70

#6 Updated by Giacomo Sanchietti about 6 years ago

  • Assignee set to Giacomo Sanchietti

#7 Updated by Giacomo Sanchietti about 6 years ago

  • Status changed from ON_QA to VERIFIED
  • Assignee deleted (Giacomo Sanchietti)
  • % Done changed from 70 to 90

Diff between releases:

--- /etc/clamd.conf.old    2015-05-12 14:00:57.554434853 +0000
+++ /etc/clamd.conf    2015-05-12 14:01:10.590862477 +0000
@@ -32,10 +32,18 @@
 AllowSupplementaryGroups yes
 ScanPE yes
 ScanELF yes
-DetectBrokenExecutables yes
+DetectBrokenExecutables no
 ScanOLE2 yes
 ScanMail yes
 ScanArchive yes
 ArchiveBlockEncrypted no

+# optimizations
+HeuristicScanPrecedence yes
+MaxConnectionQueueLength 30
+MaxFiles 1000
+MaxFileSize 30M 
+MaxRecursion 5
+MaxScanSize 48M 
+

#8 Updated by Giacomo Sanchietti about 6 years ago

  • Status changed from VERIFIED to CLOSED
  • % Done changed from 90 to 100
Released in nethserver-updates:
  • nethserver-antivirus-1.1.3-1.ns6.noarch.rpm

Also available in: Atom PDF