[sanesecurity] Re: local.ign exceptions

  • From: Roberto Ullfig <rullfig@xxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Wed, 24 Feb 2010 11:24:58 -0600

Bill Landry wrote:
Roberto Ullfig wrote:
Can I use a local.ign file to allow a signature caught by sanesecurity?
I've found the db entry here:

69599:INetMsg.SpamDomain-2m.private_pl:4:*:(2e|2f|40|20|3c|5f)707269766174652e706c(27|22|20|2f|3d|5f|3e|0a|0d)


Can I just put in the local.ign file:

sanesecurity-INetMsg-SpamDomains-2m.ndb:69599:INetMsg.SpamDomain-2m.private_pl

Yes.

Will this eventually stop working? Does the line number of the signature
ever change?

Yes, the line numbers do change, however, if you are using the
clamav-unofficial-sigs script, it will automatically update the
local.ign file with the new line info, and also remove it from the file
when the signature has either changed or been removed from the database.

Anyway, I just removed this domain from the signature database about 15
minutes ago.  It will be gone with the next update that goes out in
about 30 minutes.

Bill


Thanks! What is private_pl? How did you know which domain to remove? Did they contact you?

--
Roberto Ullfig - rullfig@xxxxxxx
ACCC Systems Programmer


Other related posts: