That page had it all wrong from the beginning. Adjusting priority only for subrules but not the metas (yes metas don't use priorities in 4.0 but relative priorities are still adjusted for backwards compatibility, __CLAMAV* end up as priority 0 like everything else).
The logical way to handle this is to simply run CLAMAV earlier, ditch all the other priority settings. Fixed the wiki. On Thu, Nov 02, 2023 at 09:05:49PM +0000, Andrew Hearn wrote: > Hello, > > We're using clam, some extra signatures, and the plugin/config as described on > https://cwiki.apache.org/confluence/display/SPAMASSASSIN/ClamAVMultipleScores > to give different signature families different scores. > > Since moving to v4, I don't think it's working... > > The only rule that is matched now, is the generic CLAMAV_VIRUS rule. > The rules for the various other signatures are no longer matched. > Could this be due to the change in priorities for meta rules, and now these > meta rules are running before they get to see the results from clam? > > I can send my config examples and debug output if that's helpful. > > Thanks!
