Török Edwin wrote:
The existing whitelist doesn't pass because amazon.com doesn't have
anything preceding it.

Try this:
X:.+\.amazon\.(at|ca|co\.uk|co\.jp|com|de|fr)([/?].*)?:(.+\.)?amazon\.com([/?].*)?:17-

Looks good, thanks!

I've put this in daily.wdb on the live servers; is that the officially-supported location for fixes like this that should (eventually) work their way into the main database? (I noticed a "local.wdb" file didn't seem to get loaded on my test system.)

More generally, where should more long-term local tweaks like this be kept, and where's the documentation on them hiding? I tripped over a mailing list post from October 2009 that showed someone's attempt to whitelist a local domain they were having similar trouble with, but I didn't find any document explaining what the possible entries were for, and what's expected in the various fields.

-kgd
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to