John Beaver wrote the following on 8/2/2007 4:02 PM -0800: > Mark Martinec wrote: > >> John, >> >> >>>> I'm still getting a few ZIPs, PDF, etc. getting though. I just noticed >>>> this scoring in one of the headers. Note the score for the >>>> sanesecurity=0.1: >>>> >>>> Res, score=5.819 tagged_above=2 required=4 >>>> tests=[AV:Email.Stk.Gen592.Sanesecurity.07071801.pdf=0.1, BAYES_99=3.5, >>>> DKIM_POLICY_SIGNSOME=0, TVD_SPACE_RATIO=2.219] >>>> >>>> I am using amavisd-new with clamav 91.1. Where can I adjust this >>>> scoring? >>>> >> Bill Landry writes: >> >>> That depends on whether you are using a spamassassin .cf file for scoring >>> the header entries or if your scoring them in amavisd.conf. I would guess >>> amavisd.conf since you would probably know if you setup a .cf file for >>> scoring these. >>> >>> In amavisd.conf, look for the section starting with: >>> @virus_name_to_spam_score_maps = >>> You can then adjust the individual SaneSecurity and/or MSRBL scores there. >>> >> Right. Or better yet, add rules to a SpamAssassin config file (e.g. >> local.cf), >> as suggested in release notes. This is also a reason why scores assigned >> by amavisd itself are near-zero. >> >> > > Figures, I missed reading the release notes... > > I am using amavisd-new to call SA, so is SA called AFTER clamav (using > SA local.cf)? Just making sure which method will work best. > > john
Virus scanning is always done before spam filtering, otherwise there would be no SaneSecurity or MSRBL headers for SA to trigger on. Bill ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
