----- Original Message ----- From: "marti" <[EMAIL PROTECTED]>
> |I have a question here. Doesn't that require clamav to load > |the virus signatures each time? If so, it would be pretty > |inefficient and resource-hungry. Wouldn't the combination of > |courier-maildrop/clamassassin and clamdscan be a lot faster > |since the clamd daemon keeps the virus.db loaded? > |-- > > If the virus.db is always loaded, and assuming long uptimes, which *nix is > good at, your virus definitions could be well out of date before they are > next loaded, seems logical to load them on the fly to me. Running ClamAV as a daemon (clamd) is much more efficient than running non-daemonized (clamscan), and clamd can be configured to check it virus definitions for updates periodically: # Perform internal sanity check (database integrity and freshness). # Default: 1800 (30 min) SelfCheck 1800 Bill