On Mon, 14 Sep 2009 17:27:23 +0200
Wolfgang Breyha <wbre...@gmx.net> wrote:

> Hi!
> 
> I'm running clamd with both official and sanesecurity sigs.
> 
> Now I made a test with my virus archive and recognized that clamd prefers
> the sanesecurity sigs. Using only ClamAV original sigs I have ~3500 virus
> matches. Using both original and sanesecurity sigs ~3900 are found, but the
> originals only match ~2000 anymore and all the others are catched by
> sanesecurity rules.
> 
> Since I want to block mail found by the original rules und mark mails for
> spamassassin found by sanesecurity this is really bad.
> 
> Is there any way to set kind of priority which of the rules are preferred?

You'd need to run two separate instances of clamd: one running the official
signatures and the other one using only the sigs from sanesecurity. 

Regards,

-- 
   oo    .....         Tomasz Kojm <tk...@clamav.net>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Mon Sep 14 17:43:09 CEST 2009
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to