ClamAV Whitelists

[swu]

How can I whitelist and email address in Zimbra/ClamAV? One vendor sends us a file that is being flagged by ClamAV as a virus. It's an encrypted file and I have even tried turning off the "inspect encrypted file" button in the Zimbra admin gui - and it still flags it. When we check the file with other virus scanners (even clamwin), it's clean.

Where can I whitelist in Zimbra that will allow certain email address to pass through the virus checking?

Thx!

[dionrowney]

bumping this to top to be answered as I also have same issue

[Predatorz]

How can I whitelist and email address in Zimbra/ClamAV? One vendor sends us a file that is being flagged by ClamAV as a virus. It's an encrypted file and I have even tried turning off the "inspect encrypted file" button in the Zimbra admin gui - and it still flags it. When we check the file with other virus scanners (even clamwin), it's clean.

Where can I whitelist in Zimbra that will allow certain email address to pass through the virus checking?

Thx!

I tried unchecking the Zimbra Admin Console but emails with encrypted archives still got blocked.
So I turned off checking of block encrypted archive by commenting out the below line in clam.conf.in. and it works.
%%comment VAR:!zimbraVirusBlockEncryptedArchive%% ArchiveBlockEncrypted

[Klug]

Did you file a bug to tell the devs the check box "doesn't work" in the adminUI?

[Predatorz]

Nope. Did not file a bug.

[dionrowney]

I had no problems with the checkbox in 5.0.4, and I think blocking all encrypted zips is a great feature... I would love to be able to continue to block all and selectively allow certain email senders (as described in the first post) to be able to send them unaffected.

How can I whitelist and email address in Zimbra/ClamAV?

[su_A_ve]

Amavis is what you would customize to skip the encrypted file from being scanned. You could do this by whitelisting the vendor's envelope from address...

There's an option to flag it with a warning that would show FILE UNCHECKED or something, instead of blocking it.

Any changes you'd had to hack in /opt/zimbra/conf/amavis.conf.in

My .02...

[dionrowney]

Can you elaborate on the syntax for doing this? Or via example or documation page?

thanks