Sorry, I don't explain very well what I'm trying to do I have a CentOS server running ClamAV. When the server receive e-mails with attached files, some files attached has inside files with extension .cmd, .bat, .cpl and others.
My doubt is how could I set ClamAV to reject or delete this attached files or even the entire e-mail? Sorry again for the wrong question -----Mensagem original----- De: clamav-users-boun...@lists.clamav.net [mailto:clamav-users-boun...@lists.clamav.net] Em nome de Benny Pedersen Enviada em: sexta-feira, 7 de dezembro de 2012 16:45 Para: clamav-users@lists.clamav.net Assunto: Re: [clamav-users] Block files type inside attached files Ronaldo Luiz de Carvalho skrev den 07-12-2012 15:19: > How could I block some files type that are inside a zip or rar files > attached into an e-mail received? is this question more how to create signatures ? the fast answer is: unpack the rar/zip sigtool --md5 file-inside >signature.hdb clamscan --database=signature.hdb in more detail see maillist archives with or google "signature clamav pdf" _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
