ClamAV - whitelist not work

H

hoanv9

Well-Known Member
Apr 15, 2020
54
6
48
45
Hi everyone,

I'm facing an issue with ClamAV on my Proxmox Mail Gateway/Server setup.
The Problem:ClamAV is repeatedly flagging an email as a false positive with the signature Sanesecurity.Jurlbl.89a214.UNOFFICIAL. Our security team has confirmed this is a false positive and I need to whitelist this specific signature so ClamAV ignores it.
What I have tried (Unsuccessfully):
  1. Created a Whitelist File: I created the file /var/lib/clamav/localallow.ign2 and added the following content to it:
    Sanesecurity.Jurlbl.89a214.UNOFFICIAL
  2. Restarted the Service: After creating/modifying the file, I restarted the ClamAV daemon (e.g., systemctl restart clamav-daemon).
  3. Result: ClamAV is still scanning and quarantining emails/files that contain this signature.
My Question: Has anyone successfully handled this specific case, or does anyone know the correct method for whitelisting signatures (especially those from the Sanesecurity database) on a Proxmox ClamAV setup?
 
You must log in or register to reply here.
Top Bottom