Re: [clamav-users] excluding a URL from "heueristics" scanning

2022-08-12 Thread joe a
On 8/12/2022 8:48 AM, joe a wrote: On 8/12/2022 4:28 AM, G.W. Haywood via clamav-users wrote: Hi there, On Thu, 11 Aug 2022, joe a wrote: [...] I post the contents of an obfuscated "[...]gud-uns.wdb". [...] Is it known behavior? An anomaly of my formatting?  A bug? I have no idea.  I don't

Re: [clamav-users] excluding a URL from "heueristics" scanning

2022-08-12 Thread joe a
On 8/12/2022 4:28 AM, G.W. Haywood via clamav-users wrote: Hi there, On Thu, 11 Aug 2022, joe a wrote: [...] I post the contents of an obfuscated "[...]gud-uns.wdb". [...] Is it known behavior? An anomaly of my formatting?  A bug? I have no idea.  I don't have time to mess about with

Re: [clamav-users] excluding a URL from "heueristics" scanning

2022-08-12 Thread G.W. Haywood via clamav-users
Hi there, On Thu, 11 Aug 2022, joe a wrote: [...] I post the contents of an obfuscated "[...]gud-uns.wdb". [...] Is it known behavior? An anomaly of my formatting? A bug? I have no idea. I don't have time to mess about with obfuscated information. -- 73, Ged.

Re: [clamav-users] excluding a URL from "heueristics" scanning

2022-08-11 Thread joe a
On 8/11/2022 7:10 PM, joe a wrote: On 8/11/2022 6:34 PM, G.W. Haywood via clamav-users wrote: Hi there, On Thu, 11 Aug 2022, joe a wrote: I do not understand why, when entering more than one URL, the first line in my "exclude" file: "/var/lib/clamav/ImaOK2day.wdb" seems to be able to match

Re: [clamav-users] excluding a URL from "heueristics" scanning

2022-08-11 Thread joe a
On 8/11/2022 6:34 PM, G.W. Haywood via clamav-users wrote: Hi there, On Thu, 11 Aug 2022, joe a wrote: I do not understand why, when entering more than one URL, the first line in my "exclude" file: "/var/lib/clamav/ImaOK2day.wdb" seems to be able to match when entered "in plain text", while

Re: [clamav-users] excluding a URL from "heueristics" scanning

2022-08-11 Thread G.W. Haywood via clamav-users
Hi there, On Thu, 11 Aug 2022, joe a wrote: I do not understand why, when entering more than one URL, the first line in my "exclude" file: "/var/lib/clamav/ImaOK2day.wdb" seems to be able to match when entered "in plain text", while subsequent lines seem to want actual "regex" notation

Re: [clamav-users] excluding a URL from "heueristics" scanning

2022-08-11 Thread joe a
On 8/11/2022 2:02 PM, joe a wrote: On 8/11/2022 1:17 PM, G.W. Haywood via clamav-users wrote: Hi there, On Thu, 11 Aug 2022, joe a wrote: A while back discussed excluding some URL's from triggering the heueristics scan.   Seemed to work.  Postfix, spamassassin, clamav in use. Now seems

Re: [clamav-users] excluding a URL from "heueristics" scanning

2022-08-11 Thread joe a
On 8/11/2022 1:17 PM, G.W. Haywood via clamav-users wrote: Hi there, On Thu, 11 Aug 2022, joe a wrote: A while back discussed excluding some URL's from triggering the heueristics scan.   Seemed to work.  Postfix, spamassassin, clamav in use. Now seems some addtional URL's are involved.

Re: [clamav-users] excluding a URL from "heueristics" scanning

2022-08-11 Thread G.W. Haywood via clamav-users
Hi there, On Thu, 11 Aug 2022, joe a wrote: A while back discussed excluding some URL's from triggering the heueristics scan. Seemed to work. Postfix, spamassassin, clamav in use. Now seems some addtional URL's are involved. Perhaps I am doing something wrong here. Been determining (?)

[clamav-users] excluding a URL from "heueristics" scanning

2022-08-11 Thread joe a
A while back discussed excluding some URL's from triggering the heueristics scan. Seemed to work. Postfix, spamassassin, clamav in use. Now seems some addtional URL's are involved. Perhaps I am doing something wrong here. Been determining (?) the offending URL's by examining the entire