Check out uri rule.
https://cwiki.apache.org/confluence/display/SPAMASSASSIN/writingrules
https://github.com/kawaiipantsu/spamassassin-rules/tree/master/rules
Check out below guide on LVM extend. Test it on a dummy vm first and remember backup your PMG before hand.
https://computingforgeeks.com/extending-root-filesystem-using-lvm-linux/
Shouldn't that option come enable by default or allow to toggle on/off in the webUI?
https://manpages.debian.org/experimental/clamav-daemon/clamd.conf.5.en.html
Show the content of /etc/pmg/templates/freshclam.conf.in or /var/lib/pmg/templates/freshclam.conf.in in your PMG.
Show the content of /var/lib/clamav directory on both PMG and mail server.
Run and output freshclam -v status on both system.
Check out the article about remove old kernel from PMG 10.
Btw, your PMG only have 5GB disk space?
https://landofnightandday.blogspot.com/2021/03/proxmox-mail-gateway-debian-10-remove.html
/dev/mapper/pmg-root is your root directory.
Run below command to check which folder is taking up the space. Then you can investigate and analyze the disk usage.
sudo du -h --max-depth=1 /
Can you confirm PMG allow access to your zimbra server via port 25.
status=deferred (delivery temporarily suspended: connect to mail.itsupport.kz[185.102.74.20]:25: Connection timed out)