Hi,
if you are only interested in catching macros you may want to take a
look at the clamd.conf's OLE2BlockMacros option and also consider using
the clamav unofficial signatures
(https://sourceforge.net/projects/unofficial-sigs/) enabling the
badmacro.ndb database.
We prefer to strip all office files with macros by default, leaving the
option to the user to decide to receive them
Regards
Daniele Duca
On 24/03/16 18:34, Marc Perkel wrote:
Been using ClamAV for years but wondering if there's something better.
Running Centos 6 and would prefer RPM install. Anyone have
recomendations?
I especially want to catch files with harmful macros.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
