We are using clamd along with amavisd-new for scanning emails and the messages having PDF attachments with password protection are being blocked with the alert :
INFECTED, message contains virus: Heuristics.Encrypted.PDF Since most of these password protected PDFs are important documents like bank statements, I want to skip this particular check. I have tried various permutations but could not figure out the exact parameter which can be used in clamd.conf file to exclude this specific category. I also created a local.ign2 file in the virus database directory with the a single line containing the term Heuristics.Encrypted.PDF in it but it had no effect. Any suggestions ? Thanks, -- Manish Kathuria _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
