[Mimedefang] freshclam -- Is it a daemon?

[Kelson]

WBrown at e1b.org wrote:
> Once an hour is not excessive at all.  Now that it now uses a DNS styule 
> lookup to query current version, it generates very little traffic to check 
> hourly.
> 
> The risk of checking less frequently is too high when a new virus outbreak 
> occurs.

Indeed.  We actually had three copies of Sober.P get through on Monday 
morning during the half-hour between the first hit and the first 
freshlcam after ClamAV added the signature.

Of course, by "get through" I mean "get defanged instead of discarded 
outright" -- so it could have been considerably worse.

-- 
Kelson Vibber
SpeedGate Communications <www.speed.net>