[Rspamd-Users] rspamd with clamav and clamav-unofficial-sigs from Sanesecurity

[Andreas Wass - Glas Gasperlmair]

Am 25.11.2021 um 15:47 schrieb Carsten Rosenberg:
>
> As pointed above I would add the option scan_text_mime = true; as it 
> will catch also on text parts.
tried that, but test mails as mentioned at 
https://sanesecurity.com/support/signature-testing/ did not block these 
emails
>
> I would add Securiteinfo to Sanesecurity unofficial sigs. But be aware 
> they also match on Spam and bad HTML/JS. Maybe you dont want to reject 
> all this instantly.
>
> You could create extra symbols with patters and reject in 
> force_actions.conf to be more flexible
>
> https://github.com/HeinleinSupport/rspamd-slac-2019/blob/master/etc/rspamd/local.d/antivirus.conf 
>
>
> https://github.com/HeinleinSupport/rspamd-slac-2019/blob/master/etc/rspamd/local.d/antivirus_group.conf 
>
>
> -- 
> Carsten
>