Hi there,
On Mon, 25 Nov 2019, Marcelo Leães via clamav-users wrote:
Macro detection appears to be experimental in MailCleaner. There is no
configuration in the web interface that allows bypass or any other
adjustment.
...
ClamAV includes a milter (unsurprisingly called 'clamav-milter') which
(if you use Sendmail, or perhaps Postfix) can be used to scan mail as
it arrives by passing the mail to a 'clamd' daemon. It is more like
a programmer's tool than a user's tool.
Clamav-milter has a facility which may at least go some way toward
doing what you want. See the man page for clamav-milter, which is
available online and from the ClamAV installation files.
I understand from your mail that MailCleaner uses clamd to scan mail,
but I do not know whether MailCleaner uses clamav-milter or not. If
it does, I guess that it would not be too difficult to reconfigure the
milter to do something like what you want. If MailCleaner does not
use clamav-milter, I guess you could reconfigure your mail server to
use it independently of MailCleaner, although that might take quite a
substantial effort.
If all else fails I have a milter which replaces clamav-milter, and
which will do whatever you want. I have been running it for several
years, but only with Sendmail. It would be a leap of faith on your
part to try to use it, and I would need to ask some questions about
your systems and their workloads to estimate the performance which
might be achieved.
As I and others have already said, to avoid scanning mail from certain
sources is to increase the available attack surface, which is already
much too big for comfort.
Please ask for clarification if I am difficult to understand. The mail
address which I use for this list rejects mail which is not sent by the
list server.
--
73,
Ged.
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
