On Mon, 6 Sep 2010 13:20:56 +0200 Matus UHLAR - fantomas <uh...@fantomas.sk> wrote:
> using clamav directly, without SA, is more effective. ClamAV plugin > seems to be OK for checking for things like phishes or strustured > data like credit card numbers, in which case it may cause false > positives. I don't see what you are saying here. The plugin simply passes the mail intact to clamd. And you don't have to score clamv as a single poison-pill rule if you don't want to.