I'm trying to add a couple of custom phishing signatures using .ndb
files within clamav's database directory
For testing purposes I've used a simple phrase "Dear Paypal Members" and
created a hex key for it
Email.Phishing.Paypal.Test.0227001:0:*:446561722050617950616c204d656d6265720a
I've also tried
Email.Phishing.Paypal.Test.0227001:446561722050617950616c204d656d6265720a
Both with no success, all test email messages pass undetected.
I'm running clamav with the default db directory (/usr/local/shar/clamav)
Email is scanned using trashscan via procmail using /usr/local/bin/clamscan
Any suggestions would be greatly appreciated
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
