Re: clamav-milter whitelist
Newcomer01 via clamav-users <[email protected]> Sun, 21 Dec 2025 18:31:29 +0000
| Newsgroups | gmane.comp.security.virus.clamav.user |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --===============3161751393140624358== Content-Type: multipart/alternative; boundary="------------EUXejDMZ0M0awENHw2UDqRKd" Content-Language: en-US, de-DE This is a multi-part message in MIME format. --------------EUXejDMZ0M0awENHw2UDqRKd Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit okay and what is your problem now? Didn't also understand what you want to do with your whitelist and what should happen then? Von / From: Newcomer01 Via Clamav-Users <mailto:[email protected]> An / To: Newcomer01 <mailto:[email protected]> CC / CC: Newcomer01 <mailto:[email protected]> Gesendet / Sent: Sonntag, Dezember 21, 2025 um 18:19 (at 06:19 PM) +0100 Betreff / Subject: Re: [clamav-users] clamav-milter whitelist > which mail client you are using? You must have an client which provide the in your case required fields, your client must be support to read out message mime header e.g. "From:" > > Von / From: Daniel Colquitt Via Clamav-Users <mailto:[email protected]> > An / To: Newcomer01 <mailto:[email protected]> > CC / CC: Daniel Colquitt <mailto:[email protected]> > Gesendet / Sent: Sonntag, Dezember 21, 2025 um 12:02 (at 12:02 PM) +0100 > Betreff / Subject: [clamav-users] clamav-milter whitelist > >> Hi there, >> >> I am having difficulty implementing an address based whitelist for clamav-milter. Running Ubuntu 24.04 with clamav* from the repos. >> >> Snippet from clamav-milter.conf >> ``` >> Whitelist /etc/clamav/clamav-milter-whitelist >> ``` >> >> Snippet from clamav-milter-whitelist with email addresses anonymised >> ``` >> From:^\(user1\|user2\|user3\)@domain\.tld$ >> ``` >> >> Snippet from clamav-milter.log >> ``` >> >> Sun Dec 21 09:09:50 2025 -> Message UNKNOWN from<[email protected]> to <<[email protected]>> with subject 'Daily update' message-id '<[email protected]>' date 'Sun, 21 Dec 2025 09:09:49 +0000' infected by SecuriteInfo.com.Spam-129467.UNOFFICIAL >> ``` >> >> Any help would be appreciated. >> >> Dan >> _______________________________________________ >> >> Manage your clamav-users mailing list subscription / unsubscribe: >> https://lists.clamav.net/mailman/listinfo/clamav-users >> >> >> Help us build a comprehensive ClamAV guide: >> https://github.com/Cisco-Talos/clamav-documentation >> >> https://docs.clamav.net/#mailing-lists-and-chat > > > _______________________________________________ > > Manage your clamav-users mailing list subscription / unsubscribe: > https://lists.clamav.net/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/Cisco-Talos/clamav-documentation > > https://docs.clamav.net/#mailing-lists-and-chat --------------EUXejDMZ0M0awENHw2UDqRKd Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit <!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> </head> <body text="#000000" bgcolor="#ffffff" smarttemplateinserted="true"> <div id="smartTemplate4-template">okay and what is your problem now? Didn't also understand what you want to do with your whitelist and what should happen then?</div> <div id="smartTemplate4-quoteHeader"><br> <table style="border-collapse: collapse; width: 100%; border-top: 2px solid #808080; font-family: Verdana, Arial, sans-serif; color: #000000; font-size: 13px; background-color: #eeeeee;"> <tbody> <tr style="vertical-align: top;"> <td style="width: 120px; vertical-align: middle;"><span style="color: #cc0000;">Von / From:</span></td> <td style="vertical-align: middle;"><a style="text-decoration: none;" href="mailto:[email protected]">Newcomer01 Via Clamav-Users</a></td> </tr> <tr style="vertical-align: top;"> <td style="width: 120px; vertical-align: middle;"><span style="color:#cc0000;">An / To:</span></td> <td style="vertical-align: middle;"><a style="text-decoration: none;" href="mailto:[email protected]">Newcomer01</a></td> </tr> <tr style="vertical-align: top;"> <td style="width: 120px; vertical-align: middle;"><span style="color: #cc0000;">CC / CC:</span></td> <td style="vertical-align: middle;"><a style="text-decoration: none;" href="mailto:[email protected]">Newcomer01</a></td> </tr> <tr style="vertical-align: top;"> <td style="width: 120px; vertical-align: middle;"><span style="color: #cc0000;">Gesendet / Sent:</span></td> <td style="vertical-align: middle;"> Sonntag, Dezember 21, 2025 um 18:19 (at 06:19 PM) +0100</td> </tr> <tr style="vertical-align: top;"> <td style="width: 120px; vertical-align: middle;"><span style="color: #cc0000;">Betreff / Subject:</span></td> <td style="vertical-align: middle;">Re: [clamav-users] clamav-milter whitelist</td> </tr> </tbody> </table> </div> <blockquote type="cite" cite="mid:[email protected]"> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <div id="smartTemplate4-template">which mail client you are using? You must have an client which provide the in your case required fields, your client must be support to read out message mime header e.g. "From:"</div> <div id="smartTemplate4-quoteHeader"><br> <table style="border-collapse: collapse; width: 100%; border-top: 2px solid #808080; font-family: Verdana, Arial, sans-serif; color: #000000; font-size: 13px; background-color: #eeeeee;"> <tbody> <tr style="vertical-align: top;"> <td style="width: 120px; vertical-align: middle;"><span style="color: #cc0000;">Von / From:</span></td> <td style="vertical-align: middle;"><a style="text-decoration: none;" href="mailto:[email protected]" moz-do-not-send="true">Daniel Colquitt Via Clamav-Users</a></td> </tr> <tr style="vertical-align: top;"> <td style="width: 120px; vertical-align: middle;"><span style="color:#cc0000;">An / To:</span></td> <td style="vertical-align: middle;"><a style="text-decoration: none;" href="mailto:[email protected]" moz-do-not-send="true">Newcomer01</a></td> </tr> <tr style="vertical-align: top;"> <td style="width: 120px; vertical-align: middle;"><span style="color: #cc0000;">CC / CC:</span></td> <td style="vertical-align: middle;"><a style="text-decoration: none;" href="mailto:[email protected]" moz-do-not-send="true">Daniel Colquitt</a></td> </tr> <tr style="vertical-align: top;"> <td style="width: 120px; vertical-align: middle;"><span style="color: #cc0000;">Gesendet / Sent:</span></td> <td style="vertical-align: middle;"> Sonntag, Dezember 21, 2025 um 12:02 (at 12:02 PM) +0100</td> </tr> <tr style="vertical-align: top;"> <td style="width: 120px; vertical-align: middle;"><span style="color: #cc0000;">Betreff / Subject:</span></td> <td style="vertical-align: middle;">[clamav-users] clamav-milter whitelist</td> </tr> </tbody> </table> </div> <blockquote type="cite" cite="mid:[email protected]"> <pre wrap="" class="moz-quote-pre">Hi there, I am having difficulty implementing an address based whitelist for clamav-milter. Running Ubuntu 24.04 with clamav* from the repos. Snippet from clamav-milter.conf ``` Whitelist /etc/clamav/clamav-milter-whitelist ``` Snippet from clamav-milter-whitelist with email addresses anonymised ``` From:^\(user1\|user2\|user3\)@domain\.tld$ ``` Snippet from clamav-milter.log ``` Sun Dec 21 09:09:50 2025 -> Message UNKNOWN from <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]" moz-do-not-send="true"><[email protected]></a> to <<a class="moz-txt-link-rfc2396E" href="mailto:[email protected]" moz-do-not-send="true"><[email protected]></a>> with subject 'Daily update' message-id '<a class="moz-txt-link-rfc2396E" href="mailto:[email protected]" moz-do-not-send="true"><[email protected]></a>' date 'Sun, 21 Dec 2025 09:09:49 +0000' infected by SecuriteInfo.com.Spam-129467.UNOFFICIAL ``` Any help would be appreciated. Dan _______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: <a class="moz-txt-link-freetext" href="https://lists.clamav.net/mailman/listinfo/clamav-users" moz-do-not-send="true">https://lists.clamav.net/mailman/listinfo/clamav-users</a> Help us build a comprehensive ClamAV guide: <a class="moz-txt-link-freetext" href="https://github.com/Cisco-Talos/clamav-documentation" moz-do-not-send="true">https://github.com/Cisco-Talos/clamav-documentation</a> <a class="moz-txt-link-freetext" href="https://docs.clamav.net/#mailing-lists-and-chat" moz-do-not-send="true">https://docs.clamav.net/#mailing-lists-and-chat</a> </pre> </blockquote> <br> <br> <fieldset class="moz-mime-attachment-header"></fieldset> <pre wrap="" class="moz-quote-pre">_______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: <a class="moz-txt-link-freetext" href="https://lists.clamav.net/mailman/listinfo/clamav-users">https://lists.clamav.net/mailman/listinfo/clamav-users</a> Help us build a comprehensive ClamAV guide: <a class="moz-txt-link-freetext" href="https://github.com/Cisco-Talos/clamav-documentation">https://github.com/Cisco-Talos/clamav-documentation</a> <a class="moz-txt-link-freetext" href="https://docs.clamav.net/#mailing-lists-and-chat">https://docs.clamav.net/#mailing-lists-and-chat</a> </pre> </blockquote> <br> </body> </html> --------------EUXejDMZ0M0awENHw2UDqRKd-- --===============3161751393140624358== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat --===============3161751393140624358==--