clamav-users February 2008 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: Re: [Clamav-users] quarantine on specific from add

Re: [Clamav-users] quarantine on specific from address

From: Gomes, Rich <Rich.Gomes_at_nospam>
Date: Tue Feb 19 2008 - 20:31:05 GMT
To: "ClamAV users ML" <clamav-users@lists.clamav.net>


Ok, here's what I have done:

Created a file called customclam1.db in /var/clamav/main.inc

The contents of the file are:
temp.email.signature=reallylonghexstringminus0a

I have saved the file and restarted the clam daemon and clamav-milter

So far, I have seen that address coe thru but it is not getting quarantined.

Am I missing something?

-----Original Message-----
From: clamav-users-bounces@lists.clamav.net [mailto:clamav-users-bounces@lists.clamav.net] On Behalf Of jef moskot Sent: Tuesday, February 19, 2008 3:03 PM To: ClamAV users ML
Subject: Re: [Clamav-users] quarantine on specific from address

On Tue, 19 Feb 2008, Gomes, Rich wrote:
> How do you run sigtool in interactive mode?

Just type "sigtool --hex-dump" (without the quotes) at the command line.

Whatever you type in will be converted into hex on the next line (although, again, it will also convert the linefeed, so strip off the last 0a before pasting).

CTRL-C gets you out of it.

Jeffrey Moskot
System Administrator
jef@math.miami.edu



Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html