The OP is going to have to explain more fully, but I took the question as does ClamXAV consider any reputation ratings that are made by the e-mail systems through which a message transits which are often expressed as spam or malware scores in the header information.
As I said earlier, I believe that consideration of such information is normally accomplished by the user's e-mail reader client or the e-mail ISP's server. -Al- On Thu, Jun 27, 2019 at 07:51 AM, Joel Esler (jesler) via clamav-users wrote: > The short answer is "No". ClamAV does not do reputation ratings, unless you > are talking about a scale of not malicious, heuristic, PUA, and full on > malicious. > > But there is not a reputation system, no. > >> On Jun 26, 2019, at 7:25 PM, Epicon Elysium via clamav-users >> <[email protected] <mailto:[email protected]>> wrote: >> >> Thank you all for your response. >> >> We're building a PaaS where everything runs on Linux. As part of the >> security requirements, we have to deploy Antivirus as well. We chose ClamAV >> in this case. One of the requirement in terms of Antivirus is that we should >> enable reputation rating. The environment itself is pretty static once >> deployed. There's no email traffic in/out. It's just application traffic >> through WAF/ModSecurity. The files itself on the OS level are pretty static. >> So the ClamAV is used to scan the filesystem. So basically, I think it's >> just reputation rating on the files if any. >> >> If it doesn't have it, is there any plugins/tools that can be used to >> achieve that? I haven't checked that PolicyD yet. >> >> Many thanks, >> Ray >> >> On Mon, Jun 24, 2019 at 11:21 PM Simon Hobson <[email protected] >> <mailto:[email protected]>> wrote: >> Epicon Elysium via clamav-users <[email protected] >> <mailto:[email protected]>> wrote: >> >> > Does ClamAV support in enabling the reputation rating? Seems I couldn't >> > find any info when searching for it. There's nothing mentioned in the >> > config file as well. >> >> AIUI no, it doesn't have anything for that. >> However, a very common setup is use AMaViS to scan mail, with ClamAV as just >> one of the tools it uses - the other tools can include things like >> reputation rating (eg sender real-time blacklists and so on). >> You might also want to have a look at PolicyD (aka Cluebringer) which brings >> other tools to the party - such as greylisting and quotas.
_______________________________________________ clamav-users mailing list [email protected] https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
