[sanesecurity] Re: SaneSecurity Signatures
- From: "Steve Basford" <steveb_clamav@xxxxxxxxxxxxxxxx>
- To: sanesecurity@xxxxxxxxxxxxx
- Date: Tue, 31 May 2016 16:24:39 +0100
On Tue, May 31, 2016 4:16 pm, Sujit Acharyya-choudhury wrote:
I am trying out SaneSecurity signatures and finding out that many of the
so called "VIRUS" are not exactly virus, but marketing e-mail, albeit can
be considered junk. How can I distinguish between real Virus and Junk
mail, marked as Virus?
Hi Sujit,
You probably need to look at spam_score_maps, to "split" malware/spam etc.
There an example config here:
http://sanesecurity.com/support/problems/
Cheers,
Steve
Sanesecurity.com
Other related posts:
