Re: [AMaViS-user] Using f-prot as second AV scanner

Peter wrote:

>> # stop anti-virus scanning when the first scanner detects a virus?
>> #$first_infected_stops_scan = 1; # default is false, all scanners in a section
>> # are called

> Why would you want a second scanner to kick in if the first detected it
> as a virus? As confirmation?

Yes, mainly to compare scanners. Especially informative when a new virus
is found and not all scanners detect it. You get to find out who did
the best job. On my system recently a new virus was first detected by
BitDefender, then later ClamAV, and surprisingly third Kaspersky.
Typically Kaspersky does better than that.

> Is this worth it in terms of resource usage?

Every message will be scanned by all primary scanners when no virus is
found, so there is only a minute amount of savings if you skip one or
more scanners when a virus is found.

> Peter

Gary V


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?p...rge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/