Using ClamAV to find spam

[Andy Wright]

Brent Addis wrote:
> Try the clamav spamassassin plugin. If your spam scores high enough it shouldn't be virus scanned and won't scew your stats.
>  
> http://www.nabble.com/My-bash-script-to-upload-PDFinfo-daily,-safely-t4115144.html has an example about halfway through the comments at the bottom.
>  
>
>  
> ________________________________
>
> From: mailscanner-bounces at lists.mailscanner.info on behalf of Andy Wright
> Sent: Fri 3/08/2007 10:42 a.m.
> To: mailscanner at lists.mailscanner.info
> Subject: Using ClamAV to find spam
>
>
>
> Hi list,
>
> I've enabled the "ClamAV Full Message Scan" option and installed the
> sanesecurity sigs. Clam is nicely finding loads (and loads... and
> loads...!) of spam, but of course is causing all these messages to be
> tagged as Virused. This is  making my MailWatch screen a sea of red and
> skewing the stats such that I appear to be receiving loads of viruses
> instead of spam.
>
> Is it possible to get MailScanner to look at the report from ClamAV and
> determine if the message is really spam rather than virused ?
>
> Cheers,
> Andy.
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
>   
Hi Brent,

thanks for the suggestion, although I'm reluctant to add yet more 
plugins - most of the spams are already being scored at 20+  (how high 
does this have to get before virus scanning is skipped?)

I guess what I'm after is a way for MailScanner to handle things 
differently if the return from ClamAV is "Email.*, Html.*" etc  Now that 
Clam seems to be more than just a *virus* finder might it make sense for 
MailScanner to look more closely at the returned result ?  Maybe an 
excuse for Julian to up the options well beyond the 300 mark ?!

Andy.