> How could I block some files type that are inside a zip or rar files > attached into an e-mail received?
Here's an example: create a blockext.zmd: Sanesecurity.Blocked.Zip.xxx.exe:0:\.(doc|xls|wpd|txt|jpg|jpeg|htm|html|pdf|pif|scr).exe$:*:*:*:*:*:* (watch the wrap after the 0:\. bit) This will blocked certain double extensions, ending in exe, in zip files, you can do same for rar files (.rmd) See sig docs: http://www.clamav.net/doc/latest/signatures.pdf Cheers, Steve Sanesecurity _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
