Carlos Williams wrote: > My question is what am I doing wrong or what do I need to do in order > for Clamav to recognize that a archived attachment contains a banned > file extension and to reject it immediately?
If you want clamav to recognize exe files within zip files as infected you need to create a custom zmd signature. See http://www.clamav.net/doc/latest/signatures.pdf - paragraph 2.4 Just set the "filename" field to something like ".*\.zip$", "encrypted" to 0, whatever you like for the "virusname" and "*" for the remaining fields. Take care, -aCaB _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
