clamav

From: CHYRON (DSMITHHFX)18 Dec 2014 15:10
To: ALL1 of 12
Pros & cons? I'm considering enabling it on our new qnap @ work. I'm running it on a distro at home. Don't think it's ever flagged a problem, or had noticeable effect on performance. Only time I'm even aware of it is during email scans, or during system updates.

On the qnap forum a couple of people have flagged scan slowness (though I'd schedule it for night), high cpu usage and conflicts with other scheduled tasks, rebuilds etc.

So I'm inclined not to enable it. Does the (minimal AFAICT) security benefit make it worth the (potential) other issues?

edit: windows boxen will be connecting to it, so...
EDITED: 18 Dec 2014 15:12 by DSMITHHFX
From: 99% of gargoyles look like (MR_BASTARD)18 Dec 2014 15:29
To: CHYRON (DSMITHHFX) 2 of 12
I run it on my QNAP. Can't say I've noticed any performance hit, but then I mainly use it for backup.

Why not suck it and see? You can always disable it later.
From: CHYRON (DSMITHHFX)18 Dec 2014 15:38
To: 99% of gargoyles look like (MR_BASTARD) 3 of 12
My biggest fear is that it might cripple a rebuild. The thing is going to be used in production, not backup. It dropped an apparently fine disk early last week, 'found' it again on a reboot and took ~7-hours to rebuild (during which it was still accessible in 'degraded' mode).

I've since enabled volume bitmap, which is supposed to make rebuild in such a scenario much faster.
Message 41317.4 was deleted
From: 99% of gargoyles look like (MR_BASTARD)21 Dec 2014 19:49
To: Al JunioR (53NORTH) 5 of 12
It's so much more fun to put a server into production without thorough testing
From: CHYRON (DSMITHHFX)21 Dec 2014 23:36
To: 99% of gargoyles look like (MR_BASTARD) 6 of 12
What has clamav done for you lately?
From: 99% of gargoyles look like (MR_BASTARD)22 Dec 2014 08:56
To: CHYRON (DSMITHHFX) 7 of 12
Oh, I dunno, the usual I guess. Scanned for viruses, updated itself to current virus definitions. Should I expect anything else?
From: CHYRON (DSMITHHFX)22 Dec 2014 11:41
To: 99% of gargoyles look like (MR_BASTARD) 8 of 12
Found any viruses?
From: Peter (BOUGHTONP)22 Dec 2014 13:05
To: CHYRON (DSMITHHFX) 9 of 12
Put working AV products on the Windows boxes and don't waste the resources, time and effort on ClamAV.
From: 99% of gargoyles look like (MR_BASTARD)22 Dec 2014 13:12
To: CHYRON (DSMITHHFX) 10 of 12
No. Which means either it's not working or my QNAP has none. Does that help?
From: CHYRON (DSMITHHFX)22 Dec 2014 13:44
To: Peter (BOUGHTONP) 11 of 12
Yeah I think so. From what I've read, cav has more value on a mail server.
From: Peter (BOUGHTONP)22 Dec 2014 14:24
To: CHYRON (DSMITHHFX) 12 of 12
From what I've read, it has almost zero value.

I mean, it might protect you from as much as 50-60% of viruses, but simply not downloading from dodgy sites and not opening unsolicited attachments has a higher protection rate than that.