Chr. v. Stuckrad wrote:

Did somebody of you create an extra 'instance' of clamad-filter to fight
spam with spam-sigs only, without scaning for virus-sigs?

I'm running two instances of clamd in our mail gateway.

One instance has the stock signatures (minus phishing sigs) and is used before SpamAssassin. If this hits, the mail is silently quarantined.

The other instance has the SaneSecurity and Malware sigs loaded as well as the stock phishing sigs and triggeres on some stuff the normal instance doesn't. This is used by SpamAssassin using the ClamAV plugin so it just contributes to the SA score.

Regards
/Jonas
--
Jonas Eckerman, FSDB & Fruktträdet
http://whatever.frukt.org/
http://www.fsdb.org/
http://www.frukt.org/

Reply via email to