Re: [clamav-users] allowlist/fixing false positive

2022-03-03 Thread G.W. Haywood via clamav-users
Hi there, On Thu, 3 Mar 2022, Alex via clamav-users wrote: The cld version was dated Sept 19th (since manually deleted) and the cvd version is dated Sept 22nd. I'll have to see if it returns. I suspect that the cld version was created when you updated the ClamAV utilities from the

Re: [clamav-users] allowlist/fixing false positive

2022-03-03 Thread Alex via clamav-users
Hi, > >How do I exclude this email from being tagged without having to bypass > >the Heuristics.Phishing.Email.SpoofedDomain rule altogether? > > > >X-Amavis-Alert: INFECTED, message contains virus: > >Heuristics.Phishing.Email.SpoofedDomain > > I think this can be enabled by disabling

Re: [clamav-users] allowlist/fixing false positive

2022-03-03 Thread Matus UHLAR - fantomas
On 01.03.22 17:15, Alex via clamav-users wrote: I have a fedora34 system with clamd-0.103.5 and amavisd/SA/postfix. I have a newsletter from ncua.gov that keeps getting blocked because it apparently contains links.gd in the body somewhere, although I can't find it. How do I exclude this email

Re: [clamav-users] allowlist/fixing false positive

2022-03-01 Thread G.W. Haywood via clamav-users
Hi there, On Tue, 1 Mar 2022, Alex via clamav-users wrote: I have a fedora34 system with clamd-0.103.5 and amavisd/SA/postfix. I have a newsletter from ncua.gov that keeps getting blocked because it The providers of Fedora do some IMHO slightly odd things with ClamAV packaging which

Re: [clamav-users] allowlist/fixing false positive

2022-03-01 Thread Kris Deugau
Alex via clamav-users wrote: Hi, I have a fedora34 system with clamd-0.103.5 and amavisd/SA/postfix. I have a newsletter from ncua.gov that keeps getting blocked because it apparently contains links.gd in the body somewhere, although I can't find it. How do I exclude this email from being

[clamav-users] allowlist/fixing false positive

2022-03-01 Thread Alex via clamav-users
Hi, I have a fedora34 system with clamd-0.103.5 and amavisd/SA/postfix. I have a newsletter from ncua.gov that keeps getting blocked because it apparently contains links.gd in the body somewhere, although I can't find it. How do I exclude this email from being tagged without having to bypass the