[clamav-users] clamav-milter and unofficial sigs

[Reindl Harald]

Am 14.12.2016 um 18:01 schrieb Benny Pedersen:
> is it possible currently to accept 3dr party virus in clamav-milter ?
>
> eq:
>
> OnUnofficial Accept
>
> where default is Rejct like OnInfected ?
>
> this will make clamav-milter more flexible

just use two clamd instances

* one as milter with reject
* one with signatures prone to FP and used with the SA plugin for scoring

the fact "is it a 3rd party" don't matter - look at sanesecurity, there 
are a ton of sigs which should only be used for scoring and others are a 
dead-safe "reject it"