I don't think there is any mechanism in clamav-milter or clamd to alert/convinct/block attachments scans based on file extension. Perhaps there is an option in Sendmail?
Micah Snyder (they/them) ClamAV Development Talos Cisco Systems, Inc. ________________________________ From: clamav-users <clamav-users-boun...@lists.clamav.net> on behalf of Marc via clamav-users <clamav-users@lists.clamav.net> Sent: Monday, May 20, 2024 5:00 AM To: ClamAV users ML <clamav-users@lists.clamav.net> Cc: Marc <m...@f1-outsourcing.eu> Subject: Re: [clamav-users] reject/flag files based on extension > > Is it possible to configure clamav, so it rejects or marks files as virus > just based on their file extension? > When it processes data from milter. Maybe someone has experience with this? I have the impression from these pages that somewhere filenames are available within clamav, so I guess rules on extensions should be possible, not? https://docs.clamav.net/manual/Signatures/FileTypeMagic.html https://docs.clamav.net/manual/Signatures/PhishSigs.html#wdb-format _______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat
_______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat