[sanesecurity] Re: OT: help with logging

  • From: Henrique de Moraes Holschuh <henrique.holschuh@xxxxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Mon, 05 Sep 2011 09:52:42 -0300

On 05-09-2011 08:26, Tom Kinghorn wrote:
Inside the db I have:
Vdc.Spam.6.0:3:*:<SNIP>

...

How would i add my custom signatures so that they log as spam and not
as a virus? eg : [ qr'^Vdc\.Spam\.' => 5.1 ],

That's correct.  Just add it somewhere inside the map.  What is inside
the qr'' delimiters is a perl regexp (man perlrequick).

However, a common practice is to assign a 0.1 score to all spam
signatures in the amavisd-new map, and score them only inside
spamassassin itself, using a spam-assassin header check.

--
Henrique de Moraes Holschuh <hmh@xxxxxxxxxxxxx>
IM@ - Informática de Municípios Associados
Engenharia de Telecomunicações
TEL +55-19-3755-6555/CEL +55-19-9293-9464

Antes de imprimir, lembre-se de seu compromisso com o Meio Ambiente
e do custo que você pode evitar.

Other related posts: