Virus Parser

Moris Kod moriskod at
Tue Feb 9 03:46:01 UTC 2016

So I'll need to run CLAMD to access this feature?   I'm compiling clamav .99 on the system now.
Also I'm looking at those .ndb files!
      From: Steve Basford <steveb_clamav at>
 To: MailScanner Discussion <mailscanner at> 
 Sent: Monday, February 8, 2016 2:49 PM
 Subject: Re: Virus Parser
On Mon, February 8, 2016 7:32 pm, Peter Lemieux wrote:

> ScanOLE2 yes
> OLE2BlockMacros yes
> then files with macros will be treated as malware.  The macros will not
> be stripped though.  The message will be quarantined by MailScanner like
> any other piece of malware.  In the organization I consult to, ordinary
> users have no need of files with macros, so blocking them all is the
> easiest solution.

Agreed the above option changes do work... but a lot of my users at work
, do have a lot of macros embedded in various price lists etc, which got
blocked by these options... hence badmacro.ndb was born :)


Web :
Twitter: @sanesecurity

MailScanner mailing list
mailscanner at

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the MailScanner mailing list