Rspamd: how many viruses have been blocked?

As far I understand, rspamd treats viruses detection as a spam.

I would like to see in the rspamd dashboard, in the graphic status and in the throughput, how many mails have been blocked because they contain viruses and how many have been blocked because they are spam.

Do you think that is possible to do that?

1 Like

I guess yes, @stephdl do you know how to do it?

Well not sure that you could separate easily spam and virus. History is stored in a redis database
to connect : redis-cli -s /var/run/redis-rspamd/rspamd

Mail are rejected with this tag CLAMAV_VIRUS(1)[Eicar-Test-Signature] in history, but after that I do not know much.
I suppose that you have to interrogate the redis database

2 Likes