Results 1 to 8 of 8

Thread: ClamAV Whitelists

  1. #1
    Join Date
    Apr 2007
    Location
    Ann Arbor, MI
    Posts
    108
    Rep Power
    8

    Red face ClamAV Whitelists

    How can I whitelist and email address in Zimbra/ClamAV? One vendor sends us a file that is being flagged by ClamAV as a virus. It's an encrypted file and I have even tried turning off the "inspect encrypted file" button in the Zimbra admin gui - and it still flags it. When we check the file with other virus scanners (even clamwin), it's clean.

    Where can I whitelist in Zimbra that will allow certain email address to pass through the virus checking?

    Thx!

  2. #2
    Join Date
    Mar 2008
    Posts
    31
    Rep Power
    7

    Default

    bumping this to top to be answered as I also have same issue

  3. #3
    Join Date
    Jun 2007
    Posts
    19
    Rep Power
    8

    Default

    Quote Originally Posted by swu View Post
    How can I whitelist and email address in Zimbra/ClamAV? One vendor sends us a file that is being flagged by ClamAV as a virus. It's an encrypted file and I have even tried turning off the "inspect encrypted file" button in the Zimbra admin gui - and it still flags it. When we check the file with other virus scanners (even clamwin), it's clean.

    Where can I whitelist in Zimbra that will allow certain email address to pass through the virus checking?

    Thx!
    I tried unchecking the Zimbra Admin Console but emails with encrypted archives still got blocked.
    So I turned off checking of block encrypted archive by commenting out the below line in clam.conf.in. and it works.
    %%comment VAR:!zimbraVirusBlockEncryptedArchive%% ArchiveBlockEncrypted

  4. #4
    Join Date
    Mar 2006
    Location
    Beaucaire, France
    Posts
    2,322
    Rep Power
    13

    Default

    Did you file a bug to tell the devs the check box "doesn't work" in the adminUI?

  5. #5
    Join Date
    Jun 2007
    Posts
    19
    Rep Power
    8

    Default

    Nope. Did not file a bug.

  6. #6
    Join Date
    Mar 2008
    Posts
    31
    Rep Power
    7

    Default

    I had no problems with the checkbox in 5.0.4, and I think blocking all encrypted zips is a great feature... I would love to be able to continue to block all and selectively allow certain email senders (as described in the first post) to be able to send them unaffected.


    How can I whitelist and email address in Zimbra/ClamAV?

  7. #7
    Join Date
    Dec 2006
    Posts
    184
    Rep Power
    8

    Default

    Amavis is what you would customize to skip the encrypted file from being scanned. You could do this by whitelisting the vendor's envelope from address...

    There's an option to flag it with a warning that would show FILE UNCHECKED or something, instead of blocking it.

    Any changes you'd had to hack in /opt/zimbra/conf/amavis.conf.in

    My .02...

  8. #8
    Join Date
    Mar 2008
    Posts
    31
    Rep Power
    7

    Default

    Can you elaborate on the syntax for doing this? Or via example or documation page?

    thanks

Similar Threads

  1. [SOLVED] Howto: Update ClamAV
    By unilogic in forum Administrators
    Replies: 9
    Last Post: 12-12-2007, 05:28 AM
  2. Outdated ClamAV warning in log
    By emx in forum Installation
    Replies: 1
    Last Post: 07-16-2007, 12:07 PM
  3. Replies: 2
    Last Post: 07-13-2007, 07:25 AM
  4. help for clamav outdated
    By newvision in forum Administrators
    Replies: 3
    Last Post: 02-16-2007, 09:14 PM
  5. Replies: 2
    Last Post: 03-15-2006, 09:37 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •