[Sagator-users] configuration issue

[Stefano R. <ste...@te...>]

I have a question about sagator 1.2.3 configuration.

What I want to obtain:

A) Check a mail if it is a virus (the mail size will no more than 40k and no less
than 2k),
B) modify the subject adding [VIRUS] tag,
C) deliver the mail to system where a dovecot rule move the mail in a folder 

For points A) e B) I write this configuration for sagator but I need some advice

   status("Virus",
      ## send these reports only for local IP addresses.
      report(['root@localhost'], report.MSG_TMPL,
        ## You can define virus names, which you want to drop.
        deliver('.',
          ## year/month/day (for example 2007/01/30).
          quarantine('/var/spool/quarantine/%Y/%m/%d', '',

            ## Antivirus scanners follows here.

              (max_file_size(2048,'Filtering size ') &
(const(1.0)-max_file_size(40960))) & modify_subject('[VIRUS]',
clamd(['127.0.0.1', 3310])),
      ## comming from LOCAL_IPS (defined abowe).
	      )
        )

      ).ifscan(sender_regexp({'LOCAL_IP': [LOCAL_IPS]}))
    ),


Thanks in advance for help

Zp