Hello Fritz, what do you think of the idea to add the possibility to test the clamav results against an regex. If it matches, a different per message score could be added. So it would be possible to give the sanesecurity (or other not 100% proofed signatures) viruses a lower score than the clamd viruses.
maybe somethig like "suspicious virus regex" If a clamd result matches this expression the virus found will be scored with the "suspicious virus score" "suspicious virus score" score to add if the suspicous virus regex mathced the clamd output Matti - Matti Haack - Hit Haack IT Service Gmbh Poltlbauer Weg 4, D-94036 Passau +49 851 50477-22 Fax: +49 851 50477-29 http://www.haack-it.de Registergericht Passau HRB 5678 USt. ID: DE195625715 Besuchen Sie jetzt unseren neuen INTERNET&NETWORK Security Shop mit faszinierenden Angeboten rund um Ihre Netzwerk- Sicherheit: http://www.inn.de -- Ausgehende E-Mail wurde auf Viren gescannt -- ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
