Hello Edwin. Here is:
clamscan -d /var/lib/clamav/local.pdb message.eml message.eml: OK ----------- SCAN SUMMARY ----------- Known viruses: 1 Engine version: 0.97.2 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 0.021 sec (0 m 0 s) # cat message.eml <a href="http://www.w3schools.com/" target="_blank">Visit testbank.lan</a> -rw-r--r-- 1 clam clam 15 Oct 20 14:20 local.pdb cat /var/lib/clamav/local.pdb H:testbank.lan Thank you. With best reagrds, Ivan -----Original Message----- From: Török Edwin <edwinto...@gmail.com> To: clamav-users <clamav-users@lists.clamav.net> Sent: Thu, Oct 20, 2011 3:13 pm Subject: Re: [clamav-users] Phishing and ClamAV On 10/20/2011 03:05 PM, Ivan Ivanov wrote: > Hello Edwin, > > Thank you for your e-mail. > I've added a local.pdb in /var/lib/clamav with contenct: > H:localbankaddress.ctld > > But it appeasr that message passed as clean. Please see log entry returned by amavis (Postfix+amavis-new+ClamAV): > > amavis[17914]: (17914-04) Passed CLEAN Save the message to a file, and then post the stderr output of 'clamscan -d/var/lib/clamav/local.pdb /path/to/youremail --debug' (for example: clamscan -d/var/lib/clamav/local.pdb /path/to/youremail --debug 2>log; post contents of log) Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml