Ronaldo Luiz de Carvalho skrev den 07-12-2012 15:19:
How could I block some files type that are inside a zip or rar files
attached into an e-mail received?
is this question more how to create signatures ?
the fast answer is:
unpack the rar/zip
sigtool --md5 file-inside >signature.hdb
clamscan --database=signature.hdb
in more detail see maillist archives with or google "signature clamav
pdf"
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
