Enhancement #3141
Optimize clamd limits for performance
| Status: | CLOSED | Start date: | ||
|---|---|---|---|---|
| Priority: | Normal | Due date: | ||
| Assignee: | - | % Done: | 100% | |
| Category: | nethserver-antivirus | |||
| Target version: | v6.6 | |||
| Resolution: | NEEDINFO: | No |
Description
clamd.conf could be slightly optimized to enhance scan performances a bit.
HeuristicScanPrecedence yes MaxConnectionQueueLength 30 MaxFiles 1000 MaxFileSize 30M MaxRecursion 5 MaxScanSize 48M
Associated revisions
clamd.conf: Broken exe default to no and minor tuning. Refs #3141
History
#1
Updated by Filippo Carletti over 6 years ago
I found some false positives in web antivirus scanner logs, where some windows updates where detected as Broken.Executable.
I'd change to:
DetectBrokenExecutables no
which is the default.
#2
Updated by Filippo Carletti over 6 years ago
- Status changed from NEW to TRIAGED
- % Done changed from 0 to 20
#3
Updated by Filippo Carletti over 6 years ago
- Status changed from TRIAGED to ON_DEV
- Assignee set to Filippo Carletti
- % Done changed from 20 to 30
#4
Updated by Filippo Carletti over 6 years ago
- Status changed from ON_DEV to MODIFIED
- Assignee deleted (
Filippo Carletti) - % Done changed from 30 to 60
Package in nethserver-testing:
- nethserver-antivirus-1.1.2-1.7.ga8d7b94.ns6.noarch.rpm
Check that /etc/clamd.conf is changed according to the following diff:
35c35 < DetectBrokenExecutables yes --- > DetectBrokenExecutables no 41a42,49 > # optimizations > HeuristicScanPrecedence yes > MaxConnectionQueueLength 30 > MaxFiles 1000 > MaxFileSize 30M > MaxRecursion 5 > MaxScanSize 48M
#5
Updated by Filippo Carletti over 6 years ago
- Status changed from MODIFIED to ON_QA
- % Done changed from 60 to 70
#6
Updated by Giacomo Sanchietti about 6 years ago
- Assignee set to Giacomo Sanchietti
#7
Updated by Giacomo Sanchietti about 6 years ago
- Status changed from ON_QA to VERIFIED
- Assignee deleted (
Giacomo Sanchietti) - % Done changed from 70 to 90
Diff between releases:
--- /etc/clamd.conf.old 2015-05-12 14:00:57.554434853 +0000 +++ /etc/clamd.conf 2015-05-12 14:01:10.590862477 +0000 @@ -32,10 +32,18 @@ AllowSupplementaryGroups yes ScanPE yes ScanELF yes -DetectBrokenExecutables yes +DetectBrokenExecutables no ScanOLE2 yes ScanMail yes ScanArchive yes ArchiveBlockEncrypted no +# optimizations +HeuristicScanPrecedence yes +MaxConnectionQueueLength 30 +MaxFiles 1000 +MaxFileSize 30M +MaxRecursion 5 +MaxScanSize 48M +
#8
Updated by Giacomo Sanchietti about 6 years ago
- Status changed from VERIFIED to CLOSED
- % Done changed from 90 to 100
Released in nethserver-updates:
- nethserver-antivirus-1.1.3-1.ns6.noarch.rpm