[clamav-users] exception rule - help needed

newcomer01 newcomer01 at posteo.de
Tue Jan 3 19:03:24 UTC 2023


Hi @ all and happy new year!

I need help to create an exception rule for my Bank e-mails.

Currently, I have a "whitelist.wbd" file in the lib folder of clamav, but all of my rules seems not work.
Please help me to get the expected result, and it is generally no way for me, to disable this checks for all.

> # LibClamAV info: Suspicious link found!
> # LibClamAV info:   Real URL:    https://www.facebook.com
> # LibClamAV info:   Display URL: https://mailing.sparkasse.de
> # LibClamAV info: Suspicious link found!
> # LibClamAV info:   Real URL:    https://twitter.com
> # LibClamAV info:   Display URL: https://mailing.sparkasse.de
> # LibClamAV info: Suspicious link found!
> # LibClamAV info:   Real URL:    https://www.instagram.com
> # LibClamAV info:   Display URL: https://mailing.sparkasse.de
> # LibClamAV info: Suspicious link found!
> # LibClamAV info:   Real URL:    https://www.youtube.com
> # LibClamAV info:   Display URL: https://mailing.sparkasse.de
> # LibClamAV info: Suspicious link found!
> # LibClamAV info:   Real URL:    https://play.google.com
> # LibClamAV info:   Display URL: https://mailing.sparkasse.de
> # LibClamAV info: Suspicious link found!
> # LibClamAV info:   Real URL:    https://apps.apple.com
> # LibClamAV info:   Display URL: https://mailing.sparkasse.de
> #
> X:(http:\/\/|https:\/\/)(.+)(facebook|twitter|instagram|youtube|play\.google|apps\.apple)(.+):(http:\/\/|https:\/\/)(.+)(sparkasse|sls\-direkt)\.de([\/?].*)?:20-
> M:facebook.com:mailing.sparkasse.de
> M:https://twitter.com:mailing.sparkasse.de
> M:instagram.com:mailing.sparkasse.de
> M:youtube.com:mailing.sparkasse.de
> M:play.google.com:mailing.sparkasse.de
> M:apps.apple.com:mailing.sparkasse.de

kind regards,
Marc


More information about the clamav-users mailing list