Question about scoring with sanesecurity signatures

francis picabia fpicabia at gmail.com
Wed Sep 5 19:29:43 CEST 2012


Many of the signatures available with sanesecurity are rated to produce
false positives at a "medium" rate.  Their page:

http://sanesecurity.co.uk/databases.htm

suggests to score the detections rather than block.

How can I prevent amavis from blocking (flagging as INFECTED)
for specific clamav databases?

For example, I'd like to treat scamnailer.ndb as a DB I would
not block based on its match.


More information about the amavis-users mailing list