[clamav-users] Custom clamav rule to block exe and scr files in archive.

Virgo Pärna virgo.parna at mail.ee
Thu Feb 5 06:13:47 EST 2015


On Thu, 5 Feb 2015 09:46:28 -0000, Steve Basford <steveb_clamav at sanesecurity.com> wrote:
> On Thu, February 5, 2015 9:30 am, Virgo Pärna wrote:
>> mail content. Also, since regexes are actually case sensitive, it does not
>> match *.EXE. So there's that.
>
> (?i) will sort that case bit out...
>

    I actually did not know that way (I don't use regex that often). And it 
makes rule much more readable than [Ee] style.
    Hopefully this whole mail exchange is useful for someone else also. 

-- 
Virgo Pärna 
virgo.parna at mail.ee




More information about the clamav-users mailing list