Gary wrote: > Peter wrote:
>>> # stop anti-virus scanning when the first scanner detects a virus? >>> #$first_infected_stops_scan = 1; # default is false, all scanners in a >>> section >>> # are called >> Why would you want a second scanner to kick in if the first detected it >> as a virus? As confirmation? > Yes, mainly to compare scanners. Especially informative when a new virus > is found and not all scanners detect it. You get to find out who did > the best job. On my system recently a new virus was first detected by > BitDefender, then later ClamAV, and surprisingly third Kaspersky. > Typically Kaspersky does better than that. >> Is this worth it in terms of resource usage? > Every message will be scanned by all primary scanners when no virus is > found, so there is only a minute amount of savings if you skip one or > more scanners when a virus is found. >> Peter Actually, caching is involved, so every message may not actually be scanned: # expiration time of cached results: time to live in seconds # (how long the result of a virus/spam test remains valid) $virus_check_negative_ttl= 3*60; # time to remember that mail was not infected $virus_check_positive_ttl= 30*60; # time to remember that mail was infected Gary V ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
