How to ignore certain folders during background malware scan?
Forum
  1. Forums
  2. Imunify360
  3. Imunify360 and Imunify Sensor
  1. Host Provider
  2. Saturday, 10 October 2020
  3.  Subscribe via email
Hello,

I tried adding my list of folders to the IGNORE LIST tab on the malware scanner page, but it does not work. (The folders are still being scanned.)

I understand there is an Ignore Mask for on-demand malware scanner. However, I would like to add an Ignore Mask for the regular scheduled background scan. How can I do it?

Here is my list of folders that I do not want to be scanned during scheduled background scans:


  • /home/*/etc/*
  • /home/*/mail/*
  • /home/*/logs/*
  • /home/*/.trash/*


Thanks.

PS - The reason I do not want these folders to be scanned is because I think it is not necessary. It is very unlikely a customer will have malware in these folders, and some customers have huge amounts of many GB of mail... so I don't want to waste resources scanning them. (Especially because we use mdbox mail format, so the storage files change every time an email is modified, which defeats the benefit of rapidscan.)

Thanks.
Rate this post:
  1. 12.10.2020 11:10:17
  2. # 1
Sergey Khristich Accepted Answer
Posts: 466
Joined: 20.05.2019
0
Votes
Undo
Hello,
Thank you for reaching out! To run the scanner through the CLI, you need the command
imunify-antivirus malware on-demand start
To add scanning with mask ignore
imunify-antivirus malware on-demand start --ignore-mask
/home/*/mail/*,/home/*/tmp/*,*.tar.gz,*.tar,*.gz,*.tgz,*.bz,*.tbz,*.zip,*. rar --path / home
ignore-mask in case malware on-demand start ignore-mask may take
Patterns are Unix shell style:
* matches everything
? matches any single character
[seq] matches any character in seq
[! seq] matches any char not in seq
So imunify-antivirus malware ignore list - doesn't work here. Only full paths are needed here.
i.e. add imunify-antivirus malware ignore add /home */mail/* - will not work
This information in our documentation will be useful here https://docs.imunify360.com/command_line_interface/#malware
Thank you.
Attachments (1)
Marketing Manager
  1. 12.10.2020 18:10:01
  2. # 2
Host Provider Accepted Answer
Posts: 55
Joined: 31.01.2012
0
Votes
Undo
How can I add an Ignore List to the scheduled malware scan?

Thanks.
  1. 13.10.2020 08:10:29
  2. # 3
Sergey Khristich Accepted Answer
Posts: 466
Joined: 20.05.2019
0
Votes
Undo
Hello,
We are working on this issue. Get back to you later today with a response.
Thank you!
Marketing Manager
  1. 13.10.2020 16:10:03
  2. # 4
Sergey Khristich Accepted Answer
Posts: 466
Joined: 20.05.2019
0
Votes
Undo
Hello,
Thank you for waiting. Could you make this cron task please and run the CLI command?

imunify360-agent malware on-demand start --ignore-mask /home/*/mail/* --path /home

and in the UI - you can remove/disable the schedule.
So the scan result will still get into the database and are visible in the UI.
Hope to hear from you soon.
Marketing Manager
  • Page :
  • 1


There are no replies made for this post yet.
Be one of the first to reply to this post!
Guest
Submit Your Response
Upload files or images for this discussion by clicking on the upload button below. Supports gif,jpg,png,zip,rar,pdf
• Insert • Remove Upload Files (Maximum File Size: 2 MB)
Captcha
To protect the site from bots and unauthorized scripts, we require that you enter the captcha codes below before posting your question.