How to ignore certain folders during background malware scan?
Forum
Toggle Submenu
  1. Forums
  2. Recent
  3. Tags
Add a reply View Replies (12)
  1. Forums
  2. Imunify360
  3. Imunify360 and Imunify Sensor

Resolved How to ignore certain folders during background malware scan?

  1. Host Provider
    Host Provider
  2. Saturday, 10 October 2020
  3.  Subscribe via email
Hello,

I tried adding my list of folders to the IGNORE LIST tab on the malware scanner page, but it does not work. (The folders are still being scanned.)

I understand there is an Ignore Mask for on-demand malware scanner. However, I would like to add an Ignore Mask for the regular scheduled background scan. How can I do it?

Here is my list of folders that I do not want to be scanned during scheduled background scans:


  • /home/*/etc/*
  • /home/*/mail/*
  • /home/*/logs/*
  • /home/*/.trash/*


Thanks.

PS - The reason I do not want these folders to be scanned is because I think it is not necessary. It is very unlikely a customer will have malware in these folders, and some customers have huge amounts of many GB of mail... so I don't want to waste resources scanning them. (Especially because we use mdbox mail format, so the storage files change every time an email is modified, which defeats the benefit of rapidscan.)

Thanks.
Rate this post:
0
Responses (12)
  1. 12.10.2020 11:10:17
  2. # 1
Sergey Khristich Accepted Answer
Sergey Khristich
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
Hello,
Thank you for reaching out! To run the scanner through the CLI, you need the command
imunify-antivirus malware on-demand start
 To add scanning with mask ignore
imunify-antivirus malware on-demand start --ignore-mask
 /home/*/mail/*,/home/*/tmp/*,*.tar.gz,*.tar,*.gz,*.tgz,*.bz,*.tbz,*.zip,*. rar --path / home
ignore-mask in case malware on-demand start ignore-mask may take
Patterns are Unix shell style:
* matches everything
? matches any single character
[seq] matches any character in seq
[! seq] matches any char not in seq
So imunify-antivirus malware ignore list - doesn't work here. Only full paths are needed here.
i.e. add imunify-antivirus malware ignore add /home */mail/* - will not work
This information in our documentation will be useful here https://docs.imunify360.com/command_line_interface/#malware
Thank you.
Attachments (1)
451.png 451.png
Marketing Manager
  1. 12.10.2020 18:10:01
  2. # 2
Host Provider Accepted Answer
Host Provider
Posts: 58
Joined: 31.01.2012
0
Votes
Undo
How can I add an Ignore List to the scheduled malware scan?

Thanks.
  1. 13.10.2020 08:10:29
  2. # 3
Sergey Khristich Accepted Answer
Sergey Khristich
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
Hello,
We are working on this issue. Get back to you later today with a response.
Thank you!
Marketing Manager
  1. 13.10.2020 16:10:03
  2. # 4
Sergey Khristich Accepted Answer
Sergey Khristich
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
Hello,
Thank you for waiting. Could you make this cron task please and run the CLI command?


imunify360-agent malware on-demand start --ignore-mask /home/*/mail/* --path /home

and in the UI - you can remove/disable the schedule.
So the scan result will still get into the database and are visible in the UI.
Hope to hear from you soon.
Marketing Manager
  1. 26.12.2020 19:12:17
  2. # 5
Richard Lincourt Accepted Answer
Richard Lincourt
Posts: 0
Joined: 02.03.2021
0
Votes
Undo
me too i want exclude /home/*/imap/* on the panel please

you need to add this option ( feature ) for use mask ( * ) in the ignore tab

and at the moment it adds confusion because we can add /home/*/imap/* in the panel without the panel reporting any error to say that the path is not valid with a mask (*)

its because we dont want scan mail.. when we have one server with 3000 users / website its add a long time for scan all users for nothing more
  1. 26.12.2020 21:12:07
  2. # 6
Host Provider Accepted Answer
Host Provider
Posts: 58
Joined: 31.01.2012
0
Votes
Undo
I agree. The point is that mail folders do not need to be regularly scanned.

Perhaps imunify360 could add an option called "Do not scan MAIL folders". Then it can use internal logic to skip all mail folders, depending on if it's mbox or maildir or whatever..
  1. 27.12.2020 04:12:46
  2. # 7
Richard Accepted Answer
Richard
Posts: 0
Joined: 02.03.2021
0
Votes
Undo
I dont use imunify360

Just imunifyav+

I need this feature
  1. 27.12.2020 23:12:41
  2. # 8
RAPIDENET Accepted Answer
RAPIDENET
Posts: 0
Joined: 02.03.2021
0
Votes
Undo
no answer ?

and just for your information.. we cannot register on this forum

in this page : https://www.cloudlinux.com/create-account

the captcha said : ERROR for site owner: Invalid site key
  1. 28.12.2020 11:12:01
  2. # 9
Sergey Khristich Accepted Answer
Sergey Khristich
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
me too i want exclude /home/*/imap/* on the panel please

you need to add this option ( feature ) for use mask ( * ) in the ignore tab

and at the moment it adds confusion because we can add /home/*/imap/* in the panel without the panel reporting any error to say that the path is not valid with a mask (*)

its because we dont want scan mail.. when we have one server with 3000 users / website its add a long time for scan all users for nothing more


Hello,
Thank you for reaching out! You can add masks for mail folders that you do not need to check through the ignore list.
This information in our documentation will be useful here
https://docs.imunify360.com/user_interface/#ignore-list
https://docs.imunifyav.com/imunifyav/#ignore-list
Marketing Manager
  1. 29.12.2020 05:12:11
  2. # 10
richard lincourt Accepted Answer
richard lincourt
Posts: 0
Joined: 02.03.2021
0
Votes
Undo
we make me turn around since 5 days.. please try to understand


the cloudlinux support said this :

Taras Yasinsky
5 days ago
Greetings,

We're afraid wildcards aren't supported for the ignore list in the UI described at

https://docs.imunifyav.com/imunifyav/#ignore-list and are applicable only for

- per-scan configuration as per https://docs.imunifyav.com/imunifyav/#scan and
- CLI commands as per https://docs.imunifyav.com/cli/#malware.

i need to add /home/*/imap/* in the tab ignore list of imunifyav+ ( not imunify360 ) because its stupid to scan mail for more of 24h hours for 6000 users by servers

you need to add this feature into imunifyav+ ( i pay for that for this product for testing in this moment ( 5 license now .. i going to add it on more servers in the next week )
  1. 29.12.2020 14:12:02
  2. # 11
Sergey Khristich Accepted Answer
Sergey Khristich
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
Hello Richard,
I am sorry for the misunderstanding. Imunify360 does not support wildcard yet: "Wildcards are not supported when adding paths to the Ignore List"
For this, we have a slightly different tool. More details can be found here: https://docs.imunify360.com/faq_and_known_issues/#_21-how-to-edit-watched-and-excluded-patterns-for-malware-scanner
That is, mail directories, as well as some others, are already excluded automatically. As for the planned backup, right there, you can do what will be needed.
As for on-demand, you can add --ignore-mask /home/*/mail/*, and everything will be ignored, as Taras mentioned.
Thank you.
Marketing Manager
  1. 29.12.2020 14:12:37
  2. # 12
Sergey Khristich Accepted Answer
Sergey Khristich
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
no answer ?

and just for your information.. we cannot register on this forum

in this page : https://www.cloudlinux.com/create-account

the captcha said : ERROR for site owner: Invalid site key


Hello,
Thank you for reaching out! We fixed this error. Please try to register again.
Marketing Manager
  • Page :
  • 1


There are no replies made for this post yet.
Be one of the first to reply to this post!
richard lincourt
Submit Your Response
Upload files or images for this discussion by clicking on the upload button below. Supports gif,jpg,png,zip,rar,pdf
• Insert • Remove Upload Files (Maximum File Size: 2 MB)
Cite your Sources with a URL link to help readers verify facts or find more details.
Add Another Link
Captcha
To protect the site from bots and unauthorized scripts, we require that you enter the captcha codes below before posting your question.

General
General
  1. 551 posts
  2. 2 subcategories
CloudLinux and Control Panels
CloudLinux and Control Panels
  1. 1150 posts
  2. 5 subcategories
KernelCare
KernelCare
  1. 75 posts
  2. 1 subcategory
Imunify360
Imunify360
  1. 223 posts
  2. 1 subcategory

Stay in touch

CloudLinux Facebook Facebook 9K+ followers CloudLinux Twitter Twitter 10K+ followers CloudLinux YouTube Channel YouTube official channel CloudLinux on LinkedIn LinkedIn Follow us

Products
Success Stories
Partners
Support
About Us
privacy shield certified
aicpa soc
pci-dss
eu gdpr compliant

© All rights reserved. CloudLinux Inc.
Terms of Use | Privacy Policy | Vulnerability Reporting | Code of Ethics | Legal 

Call Sales at +1 (800) 231-7307

Email [email protected]

EU e-Privacy Directive

We use cookies to ensure you get the best experience using our website and services. Read more about it in our Privacy Policy. Please agree to the use of cookies to proceed. Alternatively, you may disable cookies in your browser at any time.

You have declined cookies. This decision can be reversed.

You have allowed cookies to be placed on your computer. This decision can be reversed.