Charles Swiger wrote: > The milter approach is less flexible. With a scoring mechanism, you can rate > actual viruses sufficiently negative that the scoring algorithm will always > reject them.
That depends on the milter you're using. My own favoured milter is MIMEDefang, which allows you do do anything you like to a message in transit so long as you can figure out how to code it in Perl. ClamAV hits on any of the Heuristics.* tests get flagged instead of treated the same as the signature-based hits, and that flag either causes an an adjustment in the SpamAssassin results returned directly to MIMEDefang later on, or a header is added which I check for in SpamAssassin on mail delivery. -kgd _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml