New feature? mapping ClamAV sigs to scores
Glenn Steen
glenn.steen at gmail.com
Tue Jun 2 08:41:53 IST 2009
2009/6/2 Michael Mansour <micoots at yahoo.com>:
>
> Hi,
>
> For the past few months I've been integrating the Sanesecurity (and other) signatures into the clamd setup I use with MS.
>
> Some of the signatures produce FP's, which are expected as explained here:
>
> http://www.sanesecurity.co.uk/databases.htm
>
> I'm on the mailing list for SaneSecurity, and the people with amavisd handle this by scoring the various clamav sigs through amavisd access maps.
>
> Is there a way to do something similar with MailScanner?
>
> FP's are hit on my end, but they are quite minimal that they don't stop me from using the additional sigs.
>
> Michael.
>
Wouldn't the SA ClamAV plugin be best used for that?
http://wiki.apache.org/spamassassin/ClamAVPlugin
Not sure if you can vary the score depending on type of hit, but I'd
imagine one could...:)
Cheers
--
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
More information about the MailScanner
mailing list