condition virus and SA Score>6?

[Dhawal Doshy]

Koopmann, Jan-Peter wrote:
> Hi,
> 
> I want to not deliver mails if a virus is detected and the SA score is above 6 (but lower than high scoring spam). Any quick idea of how to achieve this?
> 
> If SA score is below the threashold the virus should be disarmed and the mail still delivered with virus warning.

Try using a ruleset for 'Spam Actions'..
Spam Actions = %rules-dir%/spam.action.rules

Virus:	default	store/delete/whatever
FromOrTo:	default	deliver

The other option is to use newer MS releases, which have this feature 
"New example Custom Function to show how to evaluate a ruleset from 
within a Custom Function." Maybe you could try this..

- dhawal