[clamav-users] Adding a custom signature for spam

Steve Basford steveb_clamav at sanesecurity.com
Mon Nov 12 09:34:31 UTC 2018


On Mon, November 12, 2018 8:54 am, turgut kalfaoğlu wrote:
> Hello there. I was fed up with some repeated spam that was coming our
> way, and had the idea that it would be great if the clamd could stop these.

Are these being detected with 3rd party signatures?

> $ echo This is a text line from the annoying spam | sigtool --hex-dump
>

Try -n

eg.

echo -n This is a text line from the annoying spam|sigtool --hex-dump
5468697320697320612074657874206c696e652066726f6d2074686520616e6e6f79696e67207370616d

echo This is a text line from the annoying spam|sigtool --hex-dump
5468697320697320612074657874206c696e652066726f6d2074686520616e6e6f79696e67207370616d0d0a

Note that line feed 0d0a etc. at the end of the signature, which may
cause it to fail.

-- 
Cheers,

Steve
Twitter: @sanesecurity




More information about the clamav-users mailing list