John Hardin writes:
>On Fri, 2 Jan 2009, Luis Daniel Lucio Quiroz wrote:
>
>> it is for short-circuit.  Because likehood of being SPAM is higher than 
>> a Mail with virii, and because virii test needs more power, Id like to 
>> send to back virii test.
>
>You might have more success incorporating clamav through some other way 
>than as a SA plugin, then. Running it as a separate filter *after* SA, 
>assuming that the glue lets you file/discard the message based on the SA 
>score before running it through clamav...

It's perfectly fine to run ClamAV as a plugin and shortcircuit; that's
what I do, using the plugin on the Wiki.   Since Clam calls phishes
"viruses", it's a good way to rescue those for the spam corpus.


  loadplugin ClamAV clamav.pm
  full CLAMAV eval:check_clamav()
  describe CLAMAV Clam AntiVirus detected a virus
  priority CLAMAV -900
  score CLAMAV 20
  shortcircuit CLAMAV spam


--j.

Reply via email to