You don't say what version of SA you are running. On 2.63/2.64 you need a "rewrite_subject blah blah" in your local.cf. On 3.0 it has become "rewrite_header Subject blah blah". Also note that _HITS_ on 2.64 becomes _SCORE_ on 3.0.
The "report_safe [0|1]" variable could also be of interest to you.
As for virus scanners, many people seem to recommend ClamAV. I have no
experience with it, but I haven't read any complaints that I can think of.
Loren
