Matti Haack wrote: > Hello Fritz, > > what do you think of the idea to add the possibility to test the > clamav results against an regex. If it matches, a different per message > score could be added. > So it would be possible to give the sanesecurity (or other not 100% > proofed signatures) viruses a lower score than the clamd viruses. > > maybe somethig like > "suspicious virus regex" > If a clamd result matches this expression the virus found will be > scored with the "suspicious virus score" > > "suspicious virus score" > score to add if the suspicous virus regex mathced the clamd output
We don't score Virus hits, they are only blocked. Fritz says he does not see a valid reason to change this, i agree. Kevin ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
