New feature? mapping ClamAV sigs to scores
glenn.steen at gmail.com
Tue Jun 2 08:41:53 IST 2009
2009/6/2 Michael Mansour <micoots at yahoo.com>:
> For the past few months I've been integrating the Sanesecurity (and other) signatures into the clamd setup I use with MS.
> Some of the signatures produce FP's, which are expected as explained here:
> I'm on the mailing list for SaneSecurity, and the people with amavisd handle this by scoring the various clamav sigs through amavisd access maps.
> Is there a way to do something similar with MailScanner?
> FP's are hit on my end, but they are quite minimal that they don't stop me from using the additional sigs.
Wouldn't the SA ClamAV plugin be best used for that?
Not sure if you can vary the score depending on type of hit, but I'd
imagine one could...:)
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
More information about the MailScanner