> Is there way to do this inside spamassassin, without having the MTA to > sort it by size? We use exim, and it has a pretty awesome spamassassin > support, but it has a crappy clamav support.
This is not really on-topic for the SA list, but what clamav support are you missing? Looks to me like you could do this very simply with ACLs (after setting "av_scanner = clamd:/tmp/clamd" in the main configuration settings): # Deny if the message contains a virus. deny malware = * message = This message contains a virus ($malware_name). # Reject spam scoring 10+ deny message = Message blocked by our spam filter.\nEmail <[EMAIL PROTECTED]> with questions. condition = ${if <{$message_size}{100K}{true}{false}} spam = nobody:true condition = ${if >{$spam_score_int}{99}{1}{0}} -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting GERONIMO!!!" -- Bill McKenna