'Re: [clamav-users] how to configure to clamav daemon to reject file types'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       clamav-users
Subject:    Re: [clamav-users] how to configure to clamav daemon to reject file types
From:       Jeremy O'Leary via clamav-users <clamav-users () lists ! clamav ! net>
Date:       2019-07-31 13:02:09
Message-ID: CAMYZr1E40wFuEFp_WEzZxpOrDQ64+_m53ewzK46V7Tys+h3n3A () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]

Let me zoom out for a moment, ClamAV is part of a workflow that we are
trying to prevent users from working with certain file types, if ClamAV
would immediately throw a block, them then the chain of events would be
broken.  Another person who replied directly pointed out my understanding
of file types was backwards in that rejecting in clamav meant not scan.

+ Jeremy

On Tue, Jul 30, 2019 at 4:50 PM Al Varnell via clamav-users <
clamav-users@lists.clamav.net> wrote:

> External -
> [image: External Sender]
>
> I'm at a loss to understand why you would want to reject detection of ove=
r
> 99% of the malware commonly found on user platforms? Are there even
> signatures available for images?
>
> Sent from my iPad
>
> -Al-
>
> On Jul 30, 2019, at 10:23, Jeremy O'Leary via clamav-users <
> clamav-users@lists.clamav.net> wrote:
>
> =EF=BB=BF
> Hi all,
>
> Goal: only allow users to scan certain file types, such as images, PDFs,
> Libre/MS Office,...  thus rejecting scans of executables, scripts,
> zip files, gzip files, tar....
>
> It appears that ClamAV can be configured to do this
> https://www.clamav.net/documents/clamav-file-types but could someone
> provide an example clamd.conf file snippet on the syntax?  Another
> mechanism to do this?
>
> thanks,
>
> + Jeremy
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

[Attachment #5 (text/html)]

<div dir="ltr">Let me zoom out for a moment, ClamAV is part of a workflow that we are \
trying to prevent users from working with certain file types, if ClamAV would \
immediately throw a block, them then the chain of events would be broken.   Another \
person who replied directly pointed out my understanding of file types was backwards \
in that rejecting in clamav meant not scan.    <div><br></div><div>+ \
Jeremy<br></div></div><br><div class="gmail_quote"><div dir="ltr" \
class="gmail_attr">On Tue, Jul 30, 2019 at 4:50 PM Al Varnell via clamav-users &lt;<a \
href="mailto:clamav-users@lists.clamav.net">clamav-users@lists.clamav.net</a>&gt; \
wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto"><div \
style="display:none">External -</div> <div style="text-align:left">
<img width="650" alt="External Sender">
</div><p></p>I&#39;m at a loss to understand why you would want to reject detection \
of over 99% of the malware commonly found on user platforms? Are there even \
signatures available for images?<div><br><div dir="ltr">Sent from my iPad</div><div \
dir="ltr"><br></div><div dir="ltr">-Al-</div><div dir="ltr"><br><blockquote \
type="cite">On Jul 30, 2019, at 10:23, Jeremy O&#39;Leary via clamav-users &lt;<a \
href="mailto:clamav-users@lists.clamav.net" \
target="_blank">clamav-users@lists.clamav.net</a>&gt; \
wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div \
dir="ltr">Hi all,<div><br></div><div>Goal: only allow users to scan certain file \
types, such as images, PDFs, Libre/MS Office,...   thus rejecting scans of \
executables, scripts, zip  files, gzip files, tar....</div><div><br></div><div>It \
appears that ClamAV can be configured to do this  <a \
href="https://www.clamav.net/documents/clamav-file-types" \
target="_blank">https://www.clamav.net/documents/clamav-file-types</a>  but could \
someone provide an example clamd.conf file snippet on the syntax?   Another mechanism \
to do this?</div><div><br></div><div>thanks,</div><div><br></div><div>+ \
Jeremy<br></div></div> \
<span></span><br><span>_______________________________________________</span><br><span></span><br><span>clamav-users \
mailing list</span><br><span><a href="mailto:clamav-users@lists.clamav.net" \
target="_blank">clamav-users@lists.clamav.net</a></span><br><span><a \
href="https://lists.clamav.net/mailman/listinfo/clamav-users" \
target="_blank">https://lists.clamav.net/mailman/listinfo/clamav-users</a></span><br><span></span><br><span></span><br><span>Help \
us build a comprehensive ClamAV guide:</span><br><span><a \
href="https://github.com/vrtadmin/clamav-faq" \
target="_blank">https://github.com/vrtadmin/clamav-faq</a></span><br><span></span><br><span><a \
href="http://www.clamav.net/contact.html#ml" \
target="_blank">http://www.clamav.net/contact.html#ml</a></span><br></div></blockquote></div></div><br>
 _______________________________________________<br>
<br>
clamav-users mailing list<br>
<a href="mailto:clamav-users@lists.clamav.net" \
target="_blank">clamav-users@lists.clamav.net</a><br> <a \
href="https://lists.clamav.net/mailman/listinfo/clamav-users" rel="noreferrer" \
target="_blank">https://lists.clamav.net/mailman/listinfo/clamav-users</a><br> <br>
<br>
Help us build a comprehensive ClamAV guide:<br>
<a href="https://github.com/vrtadmin/clamav-faq" rel="noreferrer" \
target="_blank">https://github.com/vrtadmin/clamav-faq</a><br> <br>
<a href="http://www.clamav.net/contact.html#ml" rel="noreferrer" \
target="_blank">http://www.clamav.net/contact.html#ml</a><br> </blockquote></div>

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[prev in list] [next in list] [prev in thread] [next in thread] 