[GH-ISSUE #481] Ignoring ClamAV signatures via WUI #464

New issue

Open

opened 2026-02-27 11:11:54 +03:00 by kerem · 1 comment

kerem commented

2026-02-27 11:11:54 +03:00

Owner

Originally created by @tonioo on GitHub (Dec 4, 2013).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/481

Originally assigned to: @tonioo on GitHub.

Originally created by Patrick Ben Koetter on 2012-04-22T15:05:25Z

If should be possible to add falsley detected viruses, to ClamAVs ignore list.

Identify the pattern by virus name:

sigtool --find-sigs=BC.Exploit.CVE_2011_3412
[0001114551.cbc BYTECODE] BC.Exploit.CVE_2011_3412.{CVE_2011_3412};Engine:56-255,Target:0;(0&1);0:d0cf11e0a1b11ae1;*:1c000404

Add the pattern to the ignore list in @/var/lib/clamav/local.ign2@.
Restart/reload clamav

Originally created by @tonioo on GitHub (Dec 4, 2013). Original GitHub issue: https://github.com/modoboa/modoboa/issues/481 Originally assigned to: @tonioo on GitHub. **Originally created by Patrick Ben Koetter on 2012-04-22T15:05:25Z** If should be possible to add falsley detected viruses, to ClamAVs ignore list. - Identify the pattern by virus name: <pre> sigtool --find-sigs=BC.Exploit.CVE_2011_3412 [0001114551.cbc BYTECODE] BC.Exploit.CVE_2011_3412.{CVE_2011_3412};Engine:56-255,Target:0;(0&1);0:d0cf11e0a1b11ae1;*:1c000404 </pre> - Add the pattern to the ignore list in @/var/lib/clamav/local.ign2@. - Restart/reload clamav

kerem added the

enhancement

label

2026-02-27 11:11:54 +03:00

kerem commented

2026-02-27 11:11:55 +03:00

Author

Owner

@tonioo commented on GitHub (Dec 4, 2013):

Posted by Antoine Nguyen on 2012-04-22T19:01:34Z

Why not, maybe in a future ClamAV extension?

@tonioo commented on GitHub (Dec 4, 2013): **Posted by Antoine Nguyen on 2012-04-22T19:01:34Z** Why not, maybe in a future ClamAV extension?