ClamAV & Sanesecurity & Spamassassin

[Gareth]

No I was thinking you might have to have two copies of clamav installed
with one of them compiled to store its signatures in a different
location.
You could symlink the main signatures so both installs can see them and
mailscanners update works correctly. You could have mailscanner use
clamavmodule as it will have most issues with paths etc...
You could have clamd started from the 2nd copy which can also see the
sanesecurity signatures. The spamassassin plugin looks like it uses a
tcpip socket to clamd so it should not be too bad keeping them both
separate.

On Wed, 2007-08-22 at 14:58, Julian Field wrote:
> Didn't realise you could do this.
> I don't know of any command-line switches for ClamAV that tell it what 
> signature databases to use, but what do I know :-)
> 
> Gareth wrote:
> > It should be possible. You would need to somehow stop the clamav that
> > mailscanner runs from using the sanesecurity signatures.
> >
> > Then you could configure
> > http://wiki.apache.org/spamassassin/ClamAVPlugin with spamassassin.
> >
> > On Wed, 2007-08-22 at 13:47, Ryan Weaver wrote:
> >   
> >> Hi,
> >>
> >> I've looked around but have not been able to find an answer sufficient for
> >> me to implement.
> >>
> >> Is it possible to use the Sanesecurity definitions for ClamAV only via the
> >> Spamassassin plugin (i.e. use normal ClamAV Virus definitions for the virus
> >> scan, then use only the Sanesecurity definitions with the Spamassassin
> >> plugin)?
> >>
> >> I ask this because I am using the Vispan setup to auto block persistent
> >> virus / spam sources, however the Sanesecurity definitions make the initial
> >> virus scan return the phishing/spam as a virus hit. This is not completely
> >> bad because they are getting caught and blocked, but it would be more
> >> sanitary for them to be marked as spam instead of virus.
> >>
> >> Thanks,
> >> Ryan
> >>     
> >
> >   
> 
> Jules
> 
> -- 
> Julian Field MEng CITP
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> 
> Need help customising MailScanner?
> Contact me!
> Need help fixing or optimising your systems?
> Contact me!
> Need help getting you started solving new requirements from your boss?
> Contact me!
> 
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> 
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> For all your IT requirements visit www.transtec.co.uk