Am 06.09.2016 um 22:24 schrieb Alex:
Is there any ability to determine if a particular attachment has a Word macro enclosed in addition to just having a Word document?
that's the hob of clamav and the sa-plugin for it"OLE2BlockMacros yes" in case of a scored SA plugin won't block but add the score of that clamd-instance, for unconditional block of other things you typically have a calmd-instance with different config running as unconditional milter
