Re: clamav-milter whitelist

Newcomer01 via clamav-users <[email protected]> Sun, 21 Dec 2025 17:19:22 +0000
Newsgroups gmane.comp.security.virus.clamav.user
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--===============2970081305296574167==
Content-Type: multipart/alternative;
 boundary="------------0Xn6dCD2uyGad8o3oE0VrTzr"
Content-Language: en-US, de-DE

This is a multi-part message in MIME format.
--------------0Xn6dCD2uyGad8o3oE0VrTzr
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

which mail client you are using? You must have an client which provide the in your case required fields, your client must be support to read out message mime headerĀ e.g. "From:"

Von / From: 	Daniel Colquitt Via Clamav-Users <mailto:[email protected]>
An / To: 	Newcomer01 <mailto:[email protected]>
CC / CC: 	Daniel Colquitt <mailto:[email protected]>
Gesendet / Sent: 	Sonntag, Dezember 21, 2025 um 12:02 (at 12:02 PM) +0100
Betreff / Subject: 	[clamav-users] clamav-milter whitelist

> Hi there,
>
> I am having difficulty implementing an address based whitelist for clamav-milter. Running Ubuntu 24.04 with clamav* from the repos.
>
> Snippet from clamav-milter.conf
> ```
> Whitelist /etc/clamav/clamav-milter-whitelist
> ```
>
> Snippet from clamav-milter-whitelist with email addresses anonymised
> ```
> From:^\(user1\|user2\|user3\)@domain\.tld$
> ```
>
> Snippet from clamav-milter.log
> ```
>
> Sun Dec 21 09:09:50 2025 -> Message UNKNOWN from<[email protected]> to <<[email protected]>> with subject 'Daily update' message-id '<[email protected]>' date 'Sun, 21 Dec 2025 09:09:49 +0000' infected by SecuriteInfo.com.Spam-129467.UNOFFICIAL
> ```
>
> Any help would be appreciated.
>
> Dan
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat

--------------0Xn6dCD2uyGad8o3oE0VrTzr
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#ffffff" smarttemplateinserted="true">
    <div id="smartTemplate4-template">which mail client you are using?
      You must have an client which provide the in your case required
      fields, your client must be support to read out message mime
      headerĀ e.g. "From:"</div>
    <div id="smartTemplate4-quoteHeader"><br>
      <table
style="border-collapse: collapse; width: 100%; border-top: 2px solid #808080; font-family: Verdana, Arial, sans-serif; color: #000000; font-size: 13px; background-color: #eeeeee;">
        <tbody>
          <tr style="vertical-align: top;">
            <td style="width: 120px; vertical-align: middle;"><span
                style="color: #cc0000;">Von / From:</span></td>
            <td style="vertical-align: middle;"><a
                style="text-decoration: none;"
                href="mailto:[email protected]">Daniel
                Colquitt Via Clamav-Users</a></td>
          </tr>
          <tr style="vertical-align: top;">
            <td style="width: 120px; vertical-align: middle;"><span
                style="color:#cc0000;">An / To:</span></td>
            <td style="vertical-align: middle;"><a
                style="text-decoration: none;"
                href="mailto:[email protected]">Newcomer01</a></td>
          </tr>
          <tr style="vertical-align: top;">
            <td style="width: 120px; vertical-align: middle;"><span
                style="color: #cc0000;">CC / CC:</span></td>
            <td style="vertical-align: middle;"><a
                style="text-decoration: none;"
                href="mailto:[email protected]">Daniel Colquitt</a></td>
          </tr>
          <tr style="vertical-align: top;">
            <td style="width: 120px; vertical-align: middle;"><span
                style="color: #cc0000;">Gesendet / Sent:</span></td>
            <td style="vertical-align: middle;"> Sonntag, Dezember 21,
              2025 um 12:02 (at 12:02 PM) +0100</td>
          </tr>
          <tr style="vertical-align: top;">
            <td style="width: 120px; vertical-align: middle;"><span
                style="color: #cc0000;">Betreff / Subject:</span></td>
            <td style="vertical-align: middle;">[clamav-users]
              clamav-milter whitelist</td>
          </tr>
        </tbody>
      </table>
    </div>
    <blockquote type="cite"
      cite="mid:[email protected]">
      <pre wrap="" class="moz-quote-pre">Hi there,

I am having difficulty implementing an address based whitelist for clamav-milter. Running Ubuntu 24.04 with clamav* from the repos.

Snippet from clamav-milter.conf
```
Whitelist /etc/clamav/clamav-milter-whitelist
```

Snippet from clamav-milter-whitelist with email addresses anonymised
```
From:^\(user1\|user2\|user3\)@domain\.tld$
```

Snippet from clamav-milter.log
```

Sun Dec 21 09:09:50 2025 -&gt; Message UNKNOWN from <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]">&lt;[email protected]&gt;</a> to &lt;<a class="moz-txt-link-rfc2396E" href="mailto:[email protected]">&lt;[email protected]&gt;</a>&gt; with subject 'Daily update' message-id '<a class="moz-txt-link-rfc2396E" href="mailto:[email protected]">&lt;[email protected]&gt;</a>' date 'Sun, 21 Dec 2025 09:09:49 +0000' infected by SecuriteInfo.com.Spam-129467.UNOFFICIAL
```

Any help would be appreciated. 

Dan
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
<a class="moz-txt-link-freetext" href="https://lists.clamav.net/mailman/listinfo/clamav-users">https://lists.clamav.net/mailman/listinfo/clamav-users</a>


Help us build a comprehensive ClamAV guide:
<a class="moz-txt-link-freetext" href="https://github.com/Cisco-Talos/clamav-documentation">https://github.com/Cisco-Talos/clamav-documentation</a>

<a class="moz-txt-link-freetext" href="https://docs.clamav.net/#mailing-lists-and-chat">https://docs.clamav.net/#mailing-lists-and-chat</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------0Xn6dCD2uyGad8o3oE0VrTzr--

--===============2970081305296574167==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

--===============2970081305296574167==--