Hi, I recently get a lot of spams on all mailboxes from my server (Ispconfig 3.1). All mail have zip attachments, but the attachments is always different, even unzipped the file contains random variables/garbage to obfuscate it's real content. So the clamav approach would not work there, I tried to train spamassassin with sa-learn, but still no chance. Did someone find a good workaround for this? Or does someone have a good idea? Thanks