clamAV shows match, spamassassin detects as spam yet it still delivers

[Noel Jones via amavis-users]

On 11/7/2013 2:50 AM, Tom Kinghorn via amavis-users wrote:
> good morning List.
> 
> Apologies for the post.
> 
> I have a strange scenario whereby messages are being relayed, even
> though they are tagged as spam.
> 
> as the amavis user, i ran:
> 
> $ cat message | spamc
> 
> result:
> 
> Content analysis details:   (29.1 points, 6.0 required)
> 
> $ cat message | clamdscan
>  <company-name-hidden>.Phish.68.0.UNOFFICIAL FOUND
> 
> ----------- SCAN SUMMARY -----------
> Infected files: 1
> Time: 0.008 sec (0 m 0 s)
> 
> most other tagged message appear in the quarantine.
> 
> versions are:
> spamassassin-3.3.2-47.1
> amavisd-new-2.6.6-30.1
> perl-Mail-SpamAssassin-3.3.2-47.1
> clamav-0.97.8-79.1
> 
> many thanks
> Tom
> 
> 
> 
> 


Your evidence shown above is mostly irrelevant.  It would be far
more interesting to show us what amavis logs.

amavis doesn't use spamc.
amavis can change the results of clamscan


  -- Noel Jones