On Wednesday 17 October 2012 10:10:59 Al Varnell did opine: > On 10/17/12 12:09 AM, "Gene Heskett" wrote: > > On Wednesday 17 October 2012 03:08:07 Al Varnell did opine: > >> Gene, > >> > >> Note that the ClamAV folks do not accept the premise of a PUA being > >> an FP. > >> > >> If you go to the FP submission page you will read: > >> > >> "Please do not report false positives for PUA.* signatures because > >> they are automatically rejected" > >> > >> Before they adopted this policy I was able to slip a bug report in > >> (June 2010) concerning the over 1300 PUA.HTML.Infected.WebPage-2 > >> FP's I got, but it is still open. I ended up white-listing it. > > > > Is there a man page describing how to do that? > > Section 3.8, second paragraph (p.16) of signatures.pdf docs file or > download from <http://www.clamav.net/doc/latest/signatures.pdf>. > > > -Al-
It turns out there may be a better option noted in the clamscan man page. In the crontab that runs it, there was not a yes of no after --detect-pua, so now its "=no". We'll see how tonights run goes. Actually, in about 4 minutes, I changed the run time too. Cheers, Gene -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) My web page: <http://coyoteden.dyndns-free.com:85/gene> is up! The rhino is a homely beast, For human eyes he's not a feast. Farewell, farewell, you old rhinoceros, I'll stare at something less prepoceros. -- Ogden Nash _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
