The X-Spam-Virus could be absent from the email header. You can consider adding the following line:
add_header spam Virus _VIRUSRESULT_ If this doesn't work, the ClamAV plugin might need to include "put_metadata('X-Spam-Virus')" when it detects a virus. Jimmy On Fri, Nov 3, 2023 at 4:06 AM Andrew Hearn <skeffl...@gmail.com> wrote: > Hello, > > We're using clam, some extra signatures, and the plugin/config as > described on > https://cwiki.apache.org/confluence/display/SPAMASSASSIN/ClamAVMultipleScores > to give different signature families different scores. > > Since moving to v4, I don't think it's working... > > The only rule that is matched now, is the generic CLAMAV_VIRUS rule. > The rules for the various other signatures are no longer matched. > Could this be due to the change in priorities for meta rules, and now > these meta rules are running before they get to see the results from clam? > > I can send my config examples and debug output if that's helpful. > > Thanks! >