Re: [clamav-users] clamav-milter and "whitelist"

2019-12-23 Thread Gerard E. Seibert via clamav-users
On Mon, 23 Dec 2019 08:04:13 +0100, Alessandro Vesely via clamav-users
stated:
>Perhaps you could try and match From:snopescom-.*@cmail20.com?

Actually, it is the "@cmail20.com" part changes also. 



-- 
Jerry

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] clamav-milter and "whitelist"

2019-12-22 Thread Gerard E. Seibert via clamav-users
clamav-milter 0.102.1
FreeBSD 11.3-p5

Either I am not understanding how the "WHITELIST" works with
clamav-milter, or it is not working as I thought it would.

# This option specifies a file which contains a list of basic POSIX regular
# expressions. Addresses (sent to or from - see below) matching these regexes
# will not be scanned.  Optionally each line can start with the string "From:"
# or "To:" (note: no whitespace after the colon) indicating if it is, 
# respectively, the sender or recipient that is to be whitelisted.
# If the field is missing, "To:" is assumed.
# Lines starting with #, : or ! are ignored.
#
# Default unset (no exclusion applied)
Whitelist /usr/local/etc/whitelisted_addresses.txt

I have this line in that file:

From:market...@snopes.com

However, that file is being blocked with this message in the
clamav-milter.log file:

Fri Dec 20 20:12:00 2019 -> Message from 
 to <> 
infected by SecuriteInfo.com.Spam-50327.UNOFFICIAL

These are the two pertinent headers from that message:

Return-Path: 
From: "Snopes.com"  

I figure I am either entering the info in the file incorrectly, or I am
entering the wrong info. I cannot reliably use the "Return-Path:",
because it is not a constant.

I would appreciate it if someone could explain to me what I am dong wrong.

Thanks!

-- 
Jerry


pgpuvIk9mOCAZ.pgp
Description: OpenPGP digital signature

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml