Once an hour is not excessive at all. Now that it now uses a DNS styule lookup to query current version, it generates very little traffic to check hourly.
The risk of checking less frequently is too high when a new virus outbreak occurs.
Indeed. We actually had three copies of Sober.P get through on Monday morning during the half-hour between the first hit and the first freshlcam after ClamAV added the signature.
Of course, by "get through" I mean "get defanged instead of discarded outright" -- so it could have been considerably worse.
-- Kelson Vibber SpeedGate Communications <www.speed.net> _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
