From: Kenneth Porter [mailto:[EMAIL PROTECTED] > > --On Wednesday, November 23, 2005 10:07 AM -0500 Bowie Bailey > <[EMAIL PROTECTED]> wrote: > > > I have Clam installed with all the default options and I run > > freshclam a few times a day to keep it updated. It just works. > > If you use the Clam DNS feature to check for new data files, you can > set freshclam to check every 15 minutes (when the DNS record > expires). This is a very light load (a single UDP packet in each > direction to the Clam DB server), esp. if you forward that domain to > your ISP so that the ISP caches it for other users. This lets you > update your DB file very rapidly when a new threat is identified. If > you look at the white papers and testimonials on Clam's site, you > can see that they often have an update before commercial vendors, > and have responded as fast as 20 minutes from the first report. That > reduces your exposure window to the maximum of the time it takes the > DNS record to expire plus the response time of the data file > generator.
I was generalizing. I am currently doing DNS checks once an hour (I guess that's a bit more than "a few times a day"). I may increase that a bit. Bowie
