[Mimedefang] clamav-unofficial-sigs and pyzor
Marcus Schopen
lists at localguru.de
Mon Sep 19 08:49:42 EDT 2016
Am Montag, den 19.09.2016, 08:36 -0400 schrieb Dianne Skoll:
> On Mon, 19 Sep 2016 07:46:11 +0200
> Marcus Schopen <lists at localguru.de> wrote:
>
> > my be a little bit off topic, but are there any experience with the
> > efficiency of pyzor and clamav-unofficial-sigs [1].
>
> No comment on pyzor because I don't use it, but some of the
> clamav-unofficial-sigs are useful. We use the following data sets:
>
> phish.ndb
> rogue.hdb
> sanesecurity.ftm
> winnow_malware.hdb
> winnow_malware_links.ndb
>
> We find the others have unacceptably-high false-positive rates, and
> even the ones above occasionally get a bad signature that produces annoying
> false-positives.
Dianne and Richard, thanks for your feedback! I will get those a try.
Ciao
Marcus
More information about the MIMEDefang
mailing list