>On Wed, 2 Dec 2020, Tom Hendrikx wrote: > >> >> >> On 02-12-2020 16:18, Joe Acquisto-j4 wrote: X-Spam-Virus: _CLAMAVRESULT >> >> I never integrated Clam using this plugin, but this seems a config typo to >> be: there should be a Yes/No in there, and optionally a virus name. >> > > Yes, it looks like he's got a type-o in there. The config line should be: > "add_header spam Clamav _CLAMAVRESULT_" > in a .cf someplace. > Then the plugin will add that 'X-Spam-Virus:' header with the text "Yes" > followed by the name of the virus detected. > > You can then use the value of that header in other rules to add points for > various kinds of things detected or "meta"ed with other rules. > > >
This is clamd.cf: ------ loadplugin ClamAV clamav.pm full CLAMAV eval:check_clamav() describe CLAMAV Clam AntiVirus detected a virus score CLAMAV 10 add_header all Virus _CLAMAVRESULT -------
