Is there a way to exclude locally generated mail (or mail from certain domains) from clamassassin? e.g. clamassassin checks a list of domains/addresses/IP and doesn't scan the message then? I have a client who regularly generates mail to his employees which then gets also forwarded to several addresses in addition. This leads to a sudden mail explosion to a lot of accounts within a minute. Wouldn't be a problem with postfix. But the spam scan spawns so many spamassassin processes at the same time that the load goes up heavily and brings it to a crawl. I would like to stop that before it even gets to SA.
You can try to rewrite the procmail recipe that calls spamassassin and lookup if the sender domain of a email is lsited in /etc/local-host-names. But you should be aware that spammers often use faked sender addresses, so it might be that your spam sacnning results would get worse.
