RE: [Clamav-users] Disabling a Signature
Dexter Ang Sent: Thursday, April 29, 2004 2:02 PM > ClamAV FAQ #17: > > I found a false positive in ClamAV virus database. What shall I do? > > Fill the form at > http://clamav.sourceforge.net/cgi-bin/sendvirus.cgi Be sure to > select The file attached is... a false positive. > > - anyway, maybe ask the user to zip the html attachment first until > the false positive is cleared up in the updates. Thanks. I was going to do just that. However the document has what appears to be some sensitive financial data in it and I hesitated before diseminating it. Can someone confirm that I needn't worry about sending it? The user can't zip the document up because MailScanner checks files within the zip as any good email scanner should. cheers, Colin Colin A. Bartlett Kinetic Web Solutions www.kineticweb.biz --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Disabling a Signature
On Fri, 2004-04-30 at 00:44, Colin A. Bartlett wrote: > Team, > I'm receiving FPs on Trojan.URLspoof.gen from a client that attaches HTML > documents to emails. I need to somehow disable this signature so that he can > send these emails without getting the attachments stripped. Any way of doing > this? Or is it something up to the hook into my MTA (MailScanner)? For what > it's worth I saw an almost identical post to this in the archives but there > was no follow ups. > > cheers, > Colin ClamAV FAQ #17: I found a false positive in ClamAV virus database. What shall I do? Fill the form at http://clamav.sourceforge.net/cgi-bin/sendvirus.cgi Be sure to select The file attached is... a false positive. - anyway, maybe ask the user to zip the html attachment first until the false positive is cleared up in the updates. dex --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
