Matt Kettler writes: >Justin Mason wrote: >> John Hardin writes: >> >>> On Fri, 2 Jan 2009, Luis Daniel Lucio Quiroz wrote: >>> >>> >>>> it is for short-circuit. Because likehood of being SPAM is higher than >>>> a Mail with virii, and because virii test needs more power, Id like to >>>> send to back virii test. >>>> >>> You might have more success incorporating clamav through some other way >>> than as a SA plugin, then. Running it as a separate filter *after* SA, >>> assuming that the glue lets you file/discard the message based on the SA >>> score before running it through clamav... >>> >> >> It's perfectly fine to run ClamAV as a plugin and shortcircuit; that's >> what I do, using the plugin on the Wiki. Since Clam calls phishes >> "viruses", it's a good way to rescue those for the spam corpus. >> >> >> loadplugin ClamAV clamav.pm >> full CLAMAV eval:check_clamav() >> describe CLAMAV Clam AntiVirus detected a virus >> priority CLAMAV -900 >> score CLAMAV 20 >> shortcircuit CLAMAV spam >> >That makes sense. However, the OP was looking to do the opposite.. Run >clamav *LAST* and try to shortcircuit before you get there.
oops! my mistake, misread that. ;) --j.
