Hello, Le vendredi 30 Septembre 2005 10:58, [EMAIL PROTECTED] a écrit : > Hello all, > > Is there a way to make clam first use the main/daily signatures, and then > the custom signatures? > > As it is now, a custom signature is matched before the main/daily ones, > which confuses things for us. > > Example: > Attachment contains: "this is the body of chris" > > main/daily sig: "this is the body of chris" > > custom signature: "this is the body of" > > The custom signature will be the matching one. I would like clamav to > use the custom signatures after first trying all main/daily ones. > > If a variant conataining "this is the body of mary" comes along, > the custom sig should match, which is the point of the sig in the first > place - and not to find (by main/daily) already recognized code. > > Hope I made myself understood... :)
That's strange, as far as I know custom signatures are loaded after main.cvd and daily.cvd (in that order). You can check using clamscan --debug Can you report the result of this command ? -- Regards, Arnaud Jacques Consultant Sécurité Téléphone / Fax : +33-(0)3.44.39.76.46 Portable : +33-(0)6.24.40.95.03 E-mail : [EMAIL PROTECTED] Securiteinfo.com La Sécurité Informatique - La Sécurité des Informations. 266, rue de Villers 60123 Bonneuil en Valois _______________________________ _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
