Spam-Virus Action ?

[Supun Rathnayake]

Dear All,

I believe that the newer mailscanner versions ( I found the below text 
in MailScanner.conf - version 4.79.11 )
has the ability to differentiate between real Virus and Spam-Virus ( 
clamav spam signatures )
as below.

Is it possible to quarantine these messages straight away rather than 
forwarding again for SPAM checking with spamassassin etc.
so that we save more CPU and time ?

Abstract from MailScanner.conf :

# Some virus scanners now use their signatures to detect spam as well as
# viruses. These "viruses" are called "spam-viruses". When they are found
# the following header will be added to your message before it is passed to
# SpamAssassin, listing all the "spam-viruses" that were found as a comma-
# separated list.
# This can also be the filename of a ruleset.
Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report:

# This defines which virus reports from your virus scanners are really the
# names of "spam-viruses" as described in the "Spam-Virus Header" section
# above. This is a space-separated list of strings which can contain "*"
# wildcards to mean "any string of characters", and which will match the
# whole name of the virus reported by your virus scanner. So for example
# "HTML/*" will match all virus names which start with the string "HTML/".
# The supplied example is suitable for F-Prot6 and the SaneSecurity
# databases for ClamAV. The test is case-sensitive.
# This cannot be a ruleset, it must be a simple value as described.
Virus Names Which Are Spam = Sane*UNOFFICIAL HTML/* *Phish*

-- 
With Best Regards,

Supun Rathnayake

Lanka communication Services (Pvt) Ltd.
65C, Dharmapala Mawatha,
Colombo 07.
Sri Lanka.
Tel: +94-11-2437545
http://www.lankacom.net
http://blog.lankacom.net