Hello all,

Is there a way to make clam first use the main/daily signatures, and then
the custom signatures?

As it is now, a custom signature is matched before the main/daily ones,
which confuses things for us.

Example:
  Attachment contains: "this is the body of chris"

  main/daily sig:      "this is the body of chris"

  custom signature:    "this is the body of"

The custom signature will be the matching one. I would like clamav to
use the custom signatures after first trying all main/daily ones.

If a variant conataining "this is the body of mary" comes along,
the custom sig should match, which is the point of the sig in the first
place - and not to find (by main/daily) already recognized code.

Hope I made myself understood... :)

Thanks in advance,
//D

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to