On Mon, 2009-10-05 at 20:17 +0200, Karsten Bräckelmann wrote: > On Mon, 2009-10-05 at 11:01 -0700, Jefferson Davis wrote: > > Thanks for the tips and low-grade knuck-wrap. Investigating - > > installed 20_sought, tweaked local.cf back to 5.0 per list > > recommendation.
> Just a minor nit, in case it isn't just different terminology. Installed > sounds like a one-time operation -- the Sought rule-set needs to be > updated using sa-update frequently, preferably more than once a day. How often should I be running sa-update to pick up SOUGHT. I currently run it automatically once a day, and ad-hoc whenever I tweak any other rules. Should I run 4 times/day? 6? Inquiring minds want to know. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com
signature.asc
Description: This is a digitally signed message part
