Thanks, it works How ever I have a question. In my configuration I have to mark subject with "[SPAM]"
How I can tell SA to use another mark "[VIRII]" if clamav plug marks mail. TIA On Saturday 03 January 2009 03:53:12 Justin Mason wrote: > John Hardin writes: > >On Fri, 2 Jan 2009, Luis Daniel Lucio Quiroz wrote: > >> it is for short-circuit. Because likehood of being SPAM is higher than > >> a Mail with virii, and because virii test needs more power, Id like to > >> send to back virii test. > > > >You might have more success incorporating clamav through some other way > >than as a SA plugin, then. Running it as a separate filter *after* SA, > >assuming that the glue lets you file/discard the message based on the SA > >score before running it through clamav... > > It's perfectly fine to run ClamAV as a plugin and shortcircuit; that's > what I do, using the plugin on the Wiki. Since Clam calls phishes > "viruses", it's a good way to rescue those for the spam corpus. > > > loadplugin ClamAV clamav.pm > full CLAMAV eval:check_clamav() > describe CLAMAV Clam AntiVirus detected a virus > priority CLAMAV -900 > score CLAMAV 20 > shortcircuit CLAMAV spam > > > --j.
