Justin Mason wrote:
> John Hardin writes:
>
>> On Fri, 2 Jan 2009, Luis Daniel Lucio Quiroz wrote:
>>
>>
>>> it is for short-circuit. Because likehood of being SPAM is higher than
>>> a Mail with virii, and because virii test needs more power, Id like to
>>> send to back virii test.
>>>
>> You might have more success incorporating clamav through some other way
>> than as a SA plugin, then. Running it as a separate filter *after* SA,
>> assuming that the glue lets you file/discard the message based on the SA
>> score before running it through clamav...
>>
>
> It's perfectly fine to run ClamAV as a plugin and shortcircuit; that's
> what I do, using the plugin on the Wiki. Since Clam calls phishes
> "viruses", it's a good way to rescue those for the spam corpus.
>
>
> loadplugin ClamAV clamav.pm
> full CLAMAV eval:check_clamav()
> describe CLAMAV Clam AntiVirus detected a virus
> priority CLAMAV -900
> score CLAMAV 20
> shortcircuit CLAMAV spam
>
That makes sense. However, the OP was looking to do the opposite.. Run
clamav *LAST* and try to shortcircuit before you get there.
