Re: [clamav-users] Blocking file types?

2021-04-26 Thread Alex via clamav-users
Hi, > for examples of utilities which might be useful. You're just going to > create regular expressions of a kind, where (unlike the familiar kind) > literal characters are given in hexadecimal instead of as themselves. > > The regex way: (A|B)C{1,3}\x01 > Signature way: (41|42)43{1-3}01 > >

Re: [clamav-users] Blocking file types?

2021-04-25 Thread G.W. Haywood via clamav-users
Hi there, On Sun, 25 Apr 2021, Alex via clamav-users wrote: ... the clamav instructions for building a signature appear to rely on there being an existing file. If you mean piping a file through 'sigtool' to get a hexadecimal representation, that's just one way to do it. You can also write

Re: [clamav-users] Blocking file types?

2021-04-25 Thread Alex via clamav-users
Hi, > > I'm using clamav with spamassassin and amavis on fedora33 and would > > like to block content based on CL_TYPE_SCRIPT, such as javascript > > within a PDF. > > > > https://www.clamav.net/documents/clamav-file-types > > > > How does this work? > ... > Having decided what you're scanning is

Re: [clamav-users] Blocking file types?

2021-04-25 Thread G.W. Haywood via clamav-users
Hi there, On Sun, 25 Apr 2021, Alex via clamav-users wrote: I'm using clamav with spamassassin and amavis on fedora33 and would like to block content based on CL_TYPE_SCRIPT, such as javascript within a PDF. https://www.clamav.net/documents/clamav-file-types How does this work? It's no use

[clamav-users] Blocking file types?

2021-04-25 Thread Alex via clamav-users
Hi, I'm using clamav with spamassassin and amavis on fedora33 and would like to block content based on CL_TYPE_SCRIPT, such as javascript within a PDF. https://www.clamav.net/documents/clamav-file-types How does this work? ___ clamav-users mailing