« A successful project | Main | McAfee »

Why you don't want to administer an email server

Much email joy today.

We scan every incoming email for viruses using McAfee. It takes some magic to call the McAfee scanner on a Unix system through Amavis, but it does seem to work most of the time.

It was not working today, however. Starting with the new virus definitions from the 14th, McAfee began bombing out on every email coming in. This let viruses through (that did not otherwise get flagged as spam), but more importantly it began filling up the Amavis temp directory. The subdirectory limit was hit this morning and broke everything -- at which point I discovered that McAfee wasn't working.

Unfortunately, this discovery came just as we were doing planned security and maintenance upgrades to a couple of the main servers. One of the upgrades killed some bug workarounds I had made for RHEL's autofs, and a reboot of another server broke nfs due to some bad documentation. (A script of mine had been forked by another admin. He hadn't updated the documentation, and still other admins were running the BSD rather than the RHEL version. Which broke a lot of things come reboot time, but not enough for us to notice right away.)

Fixing all that took an hour or so, and then it was back to coming up with a drop-in virus scanning solution. Clam AV seemed like the thing to do, and was merrily cranking away by the time I left this afternoon.

TrackBack

TrackBack URL for this entry:
http://thras.homeunix.net/cgi-bin/mt/mt-tb.cgi/5

Comments (1)

Matthew:

Exchange! Exchange!

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

About

This page contains a single entry from the blog posted on May 16, 2007 6:13 PM.

The previous post in this blog was A successful project.

The next post in this blog is McAfee.

Many more can be found on the main index page or by looking through the archives.

Powered by
Movable Type 3.35