[clamav-users] Continuous increase of startup time (is daily.cld broken?)

G.W. Haywood clamav at jubileegroup.co.uk
Fri Oct 18 10:55:05 EDT 2019


Hi there,

On Fri, 18 Oct 2019, J.R. via clamav-users wrote:

> ... most email servers don't close the connection automatically
> until the client side sends a quit (which many spammers don't), it
> then falls back to the timeout setting to close ...

Time was when you could rely on that, but even some of the big players
get it round their necks.  I frequently see delays between 20 and 300
seconds before the QUIT command after EOM.  Amazon for example is one
big offender.  And with almost 98% of the mail I see now being spam it
would be asking for denial of service to rely on clients closing their
connections.  Unless I'm testing clamd, the moment they trip over one
of the wires (and there are *lots* of wires), I'll drop the connection
and throw another IP into the tarpit.

-- 

73,
Ged.


More information about the clamav-users mailing list