hi jason, > If I understand correctly, part of the recompile process includes removing > redundant regexps. It can only do this if all rulesets are available at > compile > time for comparison.
hm. if that *is* the case, then you've got a point. just seems that if we're sa-update'ing multiple times per day, or even hour that, with enough rules "under mgmt", we'll get to a point that there's always a change, and thus we're simply constantly compiling. gotta be a better way ... > To reduce load, maybe you can compile on a different > server and redistribute? of course that's always a possiblity. but, heh, i've already got SA/ClamAV on a separate box from my mail server to 'reduce load' ... at this rate, i'm gonna need a farm ;-)
