[clamav-users] SquidClamAV and generic rules ...

Dennis Peterson dennispe at inetnw.com
Tue Jan 5 15:39:31 EST 2016


Whitelist it, send your sample, then remove the whitelist.

dp

On 1/3/16 11:57 AM, Walter H. wrote:
> Hello,
>
> not only the downloaded content is checked, also the uploaded content, as this 
> makes it impossible
> uploading a file to VirusTotal, when e.g. the following inside a .cdb is active
>
> Sanesecurity.Foxhole.Zip_doc_js:CL_TYPE_ZIP:*:[. -_]([Dd][Oo][Cc])(([. 
> _]){1,})([Jj][Ss])$:*:*:*:*:*:*
> (Foxhole_generic.cdb)
>
> Greetings,
> Walter
>
>
>
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml




More information about the clamav-users mailing list