Török Edwin wrote:
The existing whitelist doesn't pass because amazon.com doesn't have
anything preceding it.
Try this:
X:.+\.amazon\.(at|ca|co\.uk|co\.jp|com|de|fr)([/?].*)?:(.+\.)?amazon\.com([/?].*)?:17-
Looks good, thanks!
I've put this in daily.wdb on the live servers; is that the
officially-supported location for fixes like this that should
(eventually) work their way into the main database? (I noticed a
"local.wdb" file didn't seem to get loaded on my test system.)
More generally, where should more long-term local tweaks like this be
kept, and where's the documentation on them hiding? I tripped over a
mailing list post from October 2009 that showed someone's attempt to
whitelist a local domain they were having similar trouble with, but I
didn't find any document explaining what the possible entries were for,
and what's expected in the various fields.
-kgd
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml