Additional signatures to use with ClamAV RSS



I have implemented ClamAV per the userguide, and everything appears to be working properly however I still get a bit of spam and would like some input on some additional signatures that folks are using that work and might be a little more agressive than the ones in the userguide.

Here's a quick link to the signatures on SaneSecurity's website.


by Josh 5 years ago

@Josh: We (at Vamsoft) had a mixed experience with third-party signatures the last time we used them a couple of years ago -- there have been a considerable amount of false positives, so in any case I recommend starting with those marked as Low Risk.

by Péter Karsai (Vamsoft) 5 years ago
(in reply to this post)



Thanks for the feedback. I'll try starting with some of the lower risk signatures first. As I mentioned in this post here:

I am struggling with continued spam from the same parties on a daily basis (same type of spam, same type of spamming strategy), but have been unable to come up with a solution that stops it. KrisztiƔn provided some good feedback and to my best knowledge I've implemented those changes. The no reverse name dns check has helped, but as mentioned, I've got the same type of spammers continuing on a daily basis. So any additionl thoughts are welcomed.


by Josh 5 years ago

@Josh: Is this the type of spam you described in this thread: ? If yes, please see me response there.

by Péter Karsai (Vamsoft) 5 years ago
(in reply to this post)



Yes, that is the type of spam I'm receiving.

by Josh 5 years ago

New comment

Fill in the form below to add a new comment. All fields are required. If you are a registered user on our site, please sign in first.

Email address (will not be published):
Your comment:

ORF Technical Support

Configuring, installing and troubleshooting ORF.

News & Announcements

Your dose of ORF-related news and announcements.

Everything but ORF

Discuss Exchange and system administration with fellow admins.

Feature Test Program

Feature Test Program discussion. Membership is required to visit this forum.

ORF Beta

Join the great bug hunt of the latest test release.

Customer Service

Stay Informed