it was NOT us, who was scoring with CLAMAV - it was Chris (see first respone to my initial question).
We're using SA as "one under many" tests which the smtp-proxy performs during the smtp-communication. virus-check is done by another (windoze-based ;-) ) product... Ove Starckjohann > -----Ursprüngliche Nachricht----- > Von: Matus UHLAR - fantomas [mailto:[EMAIL PROTECTED] > Gesendet: Mittwoch, 2. Juli 2008 15:30 > An: users@spamassassin.apache.org > Betreff: Re: i'm unable to catch these > > > > > > But pls tell me: how may CLAMAV score with 10 points ? where is > > > > the "virus" ??? > > > > > > virus, phish, PUA or false-positive. I recommend reject them > > > as SMTP level, not in SA plugin, if possible > > On 02.07.08 15:25, Starckjohann, Ove wrote: > > we DO reject at smtp-level if we are sure that the mail is spam. > > you seem not to reject viruses at SMTP level ;) otherwise > clamav couldn't score them :) > > > Our smtp-proxy is doing own tests (DSNRBL, Bayes, > Greylisting, ... and > > many many more) and one more test is the "opinion" of SA about the > > mailscore. All these tests result in the endscore which > decides about > > refusing or accepting an email during the smtp-session. > > -- > Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ > Warning: I wish NOT to receive e-mail advertising to this address. > Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu > postu. A day without sunshine is like, night. >