On 31 May 2017 at 15:56, Nikolaos Milas <nmi...@noa.gr> wrote: > Would you happen to know if/how we can train clamav based on our actual > messages? >
I don't think you can, but I would be interested if anyone knows otherwise. In my case, after passing through our mailserver all incoming emails are relayed to Gmail (end users all have Gmail accounts) so our end users get the benefit of Google's AV too; but it is rare for Gmail to reject an email relayed from our mailserver on the grounds that it contains a virus (Gmail response is '552 5.7.0 This message was blocked because its content presents a potential security issue'); and our mailserver blocks the source ip if this happens.
