How do I turn off the above rule? I have this in my /etc/clamd.conf: # This option sets the lowest number of Social Security Numbers found # in a file to generate a detect. # Default: 3 #StructuredMinSSNCount 5
# With this option enabled the DLP module will search for valid # SSNs formatted as xxx-yy-zzzz # Default: yes StructuredSSNFormatNormal no # With this option enabled the DLP module will search for valid # SSNs formatted as xxxyyzzzz # Default: no StructuredSSNFormatStripped no I don't even know what's causing these FP hits unless it's a URL with a lot of numbers in it in the message. Chris -- Chris KeyID 0xE372A7DA98E6705C 31.11°N 97.89°W (Elev. 1092 ft) 15:33:33 up 14 days, 22:02, 1 user, load average: 0.14, 0.22, 0.25 Mandriva Linux 2010.2, kernel 2.6.33.7-desktop586-2mnb _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml