[clamav-users] ignore yara rule

[Dino Edwards]

Hi,

Using clamav-unofficial-signatures and I'm trying to ignore a yara rule due to many FPs. The blocked message refers to the YARA.invalid_trailer_structure.UNOFFICIAL as the offending signature. However, entering any of following in local.ign2 file, clamav ignores it and keeps blocking:

YARA.invalid_trailer_structure

Any idea what I'm doing wrong here?

thanks

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220412/42f44b02/attachment.htm>