[Spamassassin Wiki] Update of "ClamAVMultipleScores" by JustinMason

[Apache Wiki <wi...@apache.org>]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Spamassassin Wiki" for change notification.

The following page has been changed by JustinMason:
http://wiki.apache.org/spamassassin/ClamAVMultipleScores

New page:
(thanks to Oliver Beresford)

{{{
loadplugin ClamAV clamav.pm 
full CLAMAV eval:check_clamav() 
describe CLAMAV Clam AntiVirus detected something... 
score CLAMAV 0.001 

# Look for specific types of ClamAV detections 
header __CLAMAV_PHISH X-Spam-Virus =~ /Yes.{1,20}Phishing/i 
header __CLAMAV_SANE X-Spam-Virus =~ /Yes.{1,20}Sanesecurity/i 
header __CLAMAV_MBL X-Spam-Virus =~ /Yes.{1,20}MBL/ 
header __CLAMAV_MSRBL X-Spam-Virus =~ /Yes.{1,20}MSRBL/ 

# Give the above rules a very late priority so that they can see the
output 
# of previous rules - otherwise they don't work! Not sure what the
correct 
# priority should be but this seems to work... 
priority __CLAMAV_PHISH 9999 
priority __CLAMAV_SANE 9999 
priority __CLAMAV_MBL 9999 
priority __CLAMAV_MSRBL 9999 

# Work out what ClamAV detected and score accordingly 
meta CLAMAV_VIRUS (CLAMAV && !__CLAMAV_PHISH && !__CLAMAV_SANE &&
!__CLAMAV_MBL && !__CLAMAV_MSRBL) 
describe CLAMAV_VIRUS Virus found by ClamAV default signatures 
score CLAMAV_VIRUS 20.0 

meta CLAMAV_PHISH (CLAMAV && __CLAMAV_PHISH && !__CLAMAV_SANE) 
describe CLAMAV_PHISH Phishing email found by ClamAV default signatures 
score CLAMAV_PHISH 10.0 

meta CLAMAV_SANE (CLAMAV && __CLAMAV_SANE) 
describe CLAMAV_SANE SPAM found by ClamAV SaneSecurity signatures 
score CLAMAV_SANE 7.5 

meta CLAMAV_MBL (CLAMAV && __CLAMAV_MBL) 
describe CLAMAV_MBL Malware found by ClamAV MBL signatures 
score CLAMAV_MBL 7.5 

meta CLAMAV_MSRBL (CLAMAV && __CLAMAV_MSRBL) 
describe CLAMAV_MSRBL SPAM found by ClamAV MRSBL signatures 
score CLAMAV_MSRBL 2.0 
}}}