> > But pls tell me: how may CLAMAV score with 10 points ? > > where is the "virus" ??? > > virus, phish, PUA or false-positive. I recommend reject them > as SMTP level, not in SA plugin, if possible
we DO reject at smtp-level if we are sure that the mail is spam. Our smtp-proxy is doing own tests (DSNRBL, Bayes, Greylisting, ... and many many more) and one more test is the "opinion" of SA about the mailscore. All these tests result in the endscore which decides about refusing or accepting an email during the smtp-session. Ove
