From 689856b186f9d26cc0e0275ad2f1069966632538 Mon Sep 17 00:00:00 2001
From: DerLinkman <derlinkman@gmail.com>
Date: Fri, 23 Jun 2023 16:13:25 +0200
Subject: [PATCH] New Symbols defined for Security ClamAV DBs

---
 data/conf/rspamd/local.d/composites.conf | 30 ++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/data/conf/rspamd/local.d/composites.conf b/data/conf/rspamd/local.d/composites.conf
index 02ff955b..b342bca6 100644
--- a/data/conf/rspamd/local.d/composites.conf
+++ b/data/conf/rspamd/local.d/composites.conf
@@ -68,3 +68,33 @@ WL_FWD_HOST {
 ENCRYPTED_CHAT {
   expression = "CHAT_VERSION_HEADER & ENCRYPTED_PGP";
 }
+
+CLAMD_SPAM_FOUND {
+  expression = "CLAM_SECI_SPAM & !MAILCOW_WHITE";
+  description = "Probably Spam, Securite Spam Flag set through ClamAV";
+  weight = 4.5;
+}
+
+CLAMD_BAD_PDF {
+  expression = "CLAM_SECI_PDF & !MAILCOW_WHITE";
+  description = "Bad PDF Found, Securite bad PDF Flag set through ClamAV";
+  score = 6;
+}
+
+CLAMD_BAD_JPG {
+  expression = "CLAM_SECI_JPG & !MAILCOW_WHITE";
+  description = "Bad JPG Found, Securite bad JPG Flag set through ClamAV";
+  score = 3;
+}
+
+CLAMD_BAD_HTML {
+  expression = "CLAM_SECI_HTML & !MAILCOW_WHITE";
+  description = "Bad HTML Found, Securite bad HTML Flag set through ClamAV";
+  score = 8;
+}
+
+CLAMD_BAD_JS {
+  expression = "CLAM_SECI_JS & !MAILCOW_WHITE";
+  description = "Bad JS Found, Securite bad JS Flag set through ClamAV";
+  score = 8;
+}
\ No newline at end of file