Re: [sanesecurity] FP feedback from large sites

2011-09-10 Thread Karsten Bräckelmann
On Sat, 2011-09-10 at 15:18 -0500, Dave Funk wrote: > That is exactly what I do. I have two clamav instances using seperate > config files, library directories, listening on different sockets. > The first runs just the official ClamAV supplied sigs, the second all the > various 3rd party sigs (San

Re: [sanesecurity] FP feedback from large sites

2011-09-10 Thread Dave Funk
On Sat, 10 Sep 2011, Steffen Heil (Mailinglisten) wrote: Take INetMsg-SpamDomains-2m.ndb and jurlbla.ndb IF they both contain the same host name... then the INetMsg-SpamDomains-2m.ndb signature name WILL ALWAYS be given out ...because the database is loaded by the clamav engine first.. tha

Re: SaneSecurity custom rules

2011-05-09 Thread Mark Martinec
> header L_AV_Unofficial X-Amavis-AV-Status =~ > m{\bAV:Sanesecurity.TestSig_Type4_Hdr.2.UNOFFICIAL\b} > Which seems to be scoring 4 just fine: > X-Spam-Status: ... tests=[.. L_AV_Unofficial=4 Indeed. > The weird part is this: > > X-Spam-Status: ... > tests=[AV:Sanesecurity.TestSig_Type4_Hdr

Re: SaneSecurity custom rules

2011-05-08 Thread darxus
On 05/08, Munroe Sollog wrote: > I am working on adding some rules to SA so that SA adds more points when > detecting a signature. Here is a pastebin of the headers and the rules: > > http://pastebin.com/qnwbSq5d > > It should be adding 4 points as per my rule, but as it is it is only > adding 0

Re: SaneSecurity

2007-06-27 Thread Bill Landry
John Rudd wrote the following on 6/27/2007 10:27 AM -0800: > Bret Miller wrote: >>> Perhaps more a clamav question, but does anyone use the additional >>> definitions for clam from SaneSecurity and are they helpful in the >>> Spam Wars? >> >> You're in luck! I just installed them yesterday. Had bee

Re: SaneSecurity

2007-06-27 Thread Marc Perkel
I'm using it and I really like it. Very effective.

Re: SaneSecurity

2007-06-27 Thread Matthias Häker
Craig Carriere schrieb: Perhaps more a clamav question, but does anyone use the additional definitions for clam from SaneSecurity and are they helpful in the Spam Wars? Thanks very effective" M. Häker

RE: SaneSecurity

2007-06-27 Thread Bret Miller
> Bret Miller wrote: > >> Perhaps more a clamav question, but does anyone use the additional > >> definitions for clam from SaneSecurity and are they helpful > >> in the Spam Wars? > > > > You're in luck! I just installed them yesterday. Had been > meaning to for > > a while, but things have been t

RE: SaneSecurity

2007-06-27 Thread Rick Cooper
> -Original Message- > From: John Rudd [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 27, 2007 1:27 PM > To: Bret Miller > Cc: users@spamassassin.apache.org > Subject: Re: SaneSecurity > > Bret Miller wrote: > >> Perhaps more a clamav

Re: SaneSecurity

2007-06-27 Thread John Rudd
Bret Miller wrote: Perhaps more a clamav question, but does anyone use the additional definitions for clam from SaneSecurity and are they helpful in the Spam Wars? You're in luck! I just installed them yesterday. Had been meaning to for a while, but things have been too busy to get the script

RE: SaneSecurity

2007-06-27 Thread Bret Miller
> Perhaps more a clamav question, but does anyone use the additional > definitions for clam from SaneSecurity and are they helpful > in the Spam Wars? You're in luck! I just installed them yesterday. Had been meaning to for a while, but things have been too busy to get the script written to update