On 12/18/2015 10:58 AM, Benny Pedersen wrote:
i think clamav is a very good virus scanner, but see more and more fokus
on clamav begins to make spamscanning and reject of valid mails for
maillists, i think its more time to think about it again ?
same fault maked in amavisd-new :(
Some third party signatures *may* focus on spam patterns - Default
ClamAV sigs don't
SA could easily support YARA rules via a third party plugin.
Contributions welcome
If you want to use Yara pattern rules to scan mail then you might as
well use SA's meta rules.
Just because it's possible to "use" ClamAV as a spam detection engine,
doesn't mean SA will mutate into being an AV engine.
