Re: ClamAV consumes so much memory that my Postfix service gets killed by OOM Killer from time to time

I don't think I can run ClamAV in a container because I am using Virtualmin web hosting control panel in a Virtual Private Server (VPS).

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individuals in Singapore






On Tuesday, March 4th, 2025 at 8:58 PM, Marc <[email protected]> wrote:

> That is why I run it in a container and have front end mail servers connect to it. I also reported that the milter is not able to find clamd when it oom and is redeployed with a new ip. Still do not know if they implemented my advisded changes, there is still a bit of old-fashioned perspective here.
> 
> > Subject: ClamAV consumes so much memory that my Postfix service gets
> > killed by OOM Killer from time to time
> > 
> > Good day from Singapore,
> > 
> > ClamAV consumes so much memory that my Postfix service gets killed by
> > OOM Killer from time to time.
> > 
> > Please refer to the series of 44 discussion posts at the following
> > mailing list archives.
> > 
> > Email Subject: [pfx] I have found out the reason why Postfix keeps
> > getting killed by OOM Killer
> > 
> > Date range of discussion posts: 2 Mar 2025 to 3 Mar 2025
> > 
> > Links:
> > 
> > [1] https://www.mail-archive.com/[email protected]/maillist.html
> > 
> > [2] https://marc.info/?t=174092337400001&r=1&w=2
> > 
> > [3] https://forum.virtualmin.com/t/i-have-found-out-the-reason-why-
> > postfix-keeps-getting-killed-by-oom-killer/132370
> > 
> > Please refer to the output of LINUX command "systemctl status postfix"
> > below.
> > 
> > ● postfix.service - Postfix Mail Transport Agent
> > Loaded: loaded (/usr/lib/systemd/system/postfix.service; enabled;
> > preset: disabled)
> > Active: active (running) since Mon 2025-03-03 19:32:07 +08; 24h ago
> > Process: 517226 ExecStartPre=/usr/sbin/restorecon -R
> > /var/spool/postfix/pid (code=exited, status=0/SUCCESS)
> > Process: 517227 ExecStartPre=/usr/libexec/postfix/aliasesdb
> > (code=exited, status=0/SUCCESS)
> > Process: 517230 ExecStartPre=/usr/libexec/postfix/chroot-update
> > (code=exited, status=0/SUCCESS)
> > Process: 517231 ExecStart=/usr/sbin/postfix start (code=exited,
> > status=0/SUCCESS)
> > Main PID: 517304 (master)
> > Tasks: 15 (limit: 48939)
> > Memory: 1.5G
> > CPU: 9h 52min 10.702s
> > CGroup: /system.slice/postfix.service
> > ├─517304 /usr/libexec/postfix/master -w
> > ├─517306 qmgr -l -t unix -u
> > ├─517364 tlsmgr -l -t unix -u
> > ├─810332 pickup -l -t unix -u
> > ├─822550 smtpd -n smtps -t inet -u -o stress= -s 2 -o
> > smtpd_sasl_auth_enable=yes -o smtpd_tls_security_level=may -o
> > smtpd_tls_wrappermode=yes
> > ├─822554 anvil -l -t unix -u
> > ├─822919 smtpd -n smtp -t inet -u -o stress= -s 2 -o
> > smtpd_sasl_auth_enable=yes -o smtpd_tls_security_level=may
> > ├─822921 proxymap -t unix -u
> > ├─823091 trivial-rewrite -n rewrite -t unix -u
> > ├─823094 cleanup -z -t unix -u
> > ├─823098 local -t unix
> > ├─823100 /usr/bin/procmail-wrapper -o -a ns1.<REDACTED>.com
> > -d ceo
> > ├─823107 /usr/bin/perl /etc/webmin/virtual-server/clam-
> > wrapper.pl /bin/clamscan
> > ├─823108 sh -c "\\/bin\\/clamscan -
> > 
> > > /tmp/clamwrapper.823107"
> > > └─823109 /bin/clamscan -
> > 
> > From the above output, it appears that clamscan is being used
> > automatically.
> > 
> > When I login to my Virtualmin web hosting control panel, I will click
> > Virtualmin at the top left, then click Email Settings > Spam and Virus
> > Scanning.
> > 
> > Under the "Global spam and virus scanner options" tab, "Virus scanning
> > program" option, the Standalone scanner (clamscan) was automatically
> > selected. PLEASE NOTE THAT I HAVE NEVER CONFIGURED THIS SETTING BEFORE
> > IN THE PAST. If I change the "Virus scanning program" option to Local
> > server scanner (clamd), will my situation improve tremendously? Will the
> > memory footprint reduce and bring about enhanced stability to my
> > AlmaLinux 9.5 Virtual Private Server (VPS) in Germany?
> > 
> > I am looking forward to your reply.
> > 
> > Thank you very much.
> > 
> > Regards,
> > 
> > Mr. Turritopsis Dohrnii Teo En Ming
> > Targeted Individuals in Singapore
> > GIMP = Government-Induced Medical Problems
> > 4th March 2025 Tuesday 8.49 PM Singapore Time
> > 
> > _______________________________________________
> > 
> > Manage your clamav-users mailing list subscription / unsubscribe:
> > https://lists.clamav.net/mailman/listinfo/clamav-users
> > 
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/Cisco-Talos/clamav-documentation
> > 
> > https://docs.clamav.net/#mailing-lists-and-chat
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat