On 2020-09-11 15:09, Robin H. Johnson wrote:
> Hi,
>
> As a result of a recent high-impact [1] false positive spam detection in
> Gentoo mail, we've disabled using the MalwarePatrol ruleset in Clamav
> for spam detection for all inbound mail to @gentoo.org
>
All of these services produce killer false positives eventually. If
you're using amavisd-new, you can score them instead of reject outright:
@virus_name_to_spam_score_maps =
(new_RE(
[ qr'^MBL_.*' => 4.0 ],
));
That doesn't totally fix the problem, but if the message is otherwise
pristine (no blacklists, etc.) then a MalwarePatrol hit won't be fatal.
