How to ignore certain folders during background malware scan?
Forum
  1. Forums
  2. Imunify360
  3. Imunify360 and Imunify Sensor
  1. Host Provider
  2. Saturday, 10 October 2020
  3.  Subscribe via email
Hello,

I tried adding my list of folders to the IGNORE LIST tab on the malware scanner page, but it does not work. (The folders are still being scanned.)

I understand there is an Ignore Mask for on-demand malware scanner. However, I would like to add an Ignore Mask for the regular scheduled background scan. How can I do it?

Here is my list of folders that I do not want to be scanned during scheduled background scans:


  • /home/*/etc/*
  • /home/*/mail/*
  • /home/*/logs/*
  • /home/*/.trash/*


Thanks.

PS - The reason I do not want these folders to be scanned is because I think it is not necessary. It is very unlikely a customer will have malware in these folders, and some customers have huge amounts of many GB of mail... so I don't want to waste resources scanning them. (Especially because we use mdbox mail format, so the storage files change every time an email is modified, which defeats the benefit of rapidscan.)

Thanks.
Rate this post:
  1. 12.10.2020 11:10:17
  2. # 1
Sergey Khristich Accepted Answer
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
Hello,
Thank you for reaching out! To run the scanner through the CLI, you need the command
imunify-antivirus malware on-demand start
To add scanning with mask ignore
imunify-antivirus malware on-demand start --ignore-mask
/home/*/mail/*,/home/*/tmp/*,*.tar.gz,*.tar,*.gz,*.tgz,*.bz,*.tbz,*.zip,*. rar --path / home
ignore-mask in case malware on-demand start ignore-mask may take
Patterns are Unix shell style:
* matches everything
? matches any single character
[seq] matches any character in seq
[! seq] matches any char not in seq
So imunify-antivirus malware ignore list - doesn't work here. Only full paths are needed here.
i.e. add imunify-antivirus malware ignore add /home */mail/* - will not work
This information in our documentation will be useful here https://docs.imunify360.com/command_line_interface/#malware
Thank you.
Attachments (1)
Marketing Manager
  1. 12.10.2020 18:10:01
  2. # 2
Host Provider Accepted Answer
Posts: 58
Joined: 31.01.2012
0
Votes
Undo
How can I add an Ignore List to the scheduled malware scan?

Thanks.
  1. 13.10.2020 08:10:29
  2. # 3
Sergey Khristich Accepted Answer
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
Hello,
We are working on this issue. Get back to you later today with a response.
Thank you!
Marketing Manager
  1. 13.10.2020 16:10:03
  2. # 4
Sergey Khristich Accepted Answer
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
Hello,
Thank you for waiting. Could you make this cron task please and run the CLI command?

imunify360-agent malware on-demand start --ignore-mask /home/*/mail/* --path /home

and in the UI - you can remove/disable the schedule.
So the scan result will still get into the database and are visible in the UI.
Hope to hear from you soon.
Marketing Manager
  1. 26.12.2020 19:12:17
  2. # 5
Richard Lincourt Accepted Answer
Posts: 0
Joined: 02.03.2021
0
Votes
Undo
me too i want exclude /home/*/imap/* on the panel please

you need to add this option ( feature ) for use mask ( * ) in the ignore tab

and at the moment it adds confusion because we can add /home/*/imap/* in the panel without the panel reporting any error to say that the path is not valid with a mask (*)

its because we dont want scan mail.. when we have one server with 3000 users / website its add a long time for scan all users for nothing more
  1. 26.12.2020 21:12:07
  2. # 6
Host Provider Accepted Answer
Posts: 58
Joined: 31.01.2012
0
Votes
Undo
I agree. The point is that mail folders do not need to be regularly scanned.

Perhaps imunify360 could add an option called "Do not scan MAIL folders". Then it can use internal logic to skip all mail folders, depending on if it's mbox or maildir or whatever..
  1. 27.12.2020 04:12:46
  2. # 7
Richard Accepted Answer
Posts: 0
Joined: 02.03.2021
0
Votes
Undo
I dont use imunify360

Just imunifyav+

I need this feature
  1. 27.12.2020 23:12:41
  2. # 8
RAPIDENET Accepted Answer
Posts: 0
Joined: 02.03.2021
0
Votes
Undo
no answer ?

and just for your information.. we cannot register on this forum

in this page : https://www.cloudlinux.com/create-account

the captcha said : ERROR for site owner: Invalid site key
  1. 28.12.2020 11:12:01
  2. # 9
Sergey Khristich Accepted Answer
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
me too i want exclude /home/*/imap/* on the panel please

you need to add this option ( feature ) for use mask ( * ) in the ignore tab

and at the moment it adds confusion because we can add /home/*/imap/* in the panel without the panel reporting any error to say that the path is not valid with a mask (*)

its because we dont want scan mail.. when we have one server with 3000 users / website its add a long time for scan all users for nothing more


Hello,
Thank you for reaching out! You can add masks for mail folders that you do not need to check through the ignore list.
This information in our documentation will be useful here
https://docs.imunify360.com/user_interface/#ignore-list
https://docs.imunifyav.com/imunifyav/#ignore-list
Marketing Manager
  1. 29.12.2020 05:12:11
  2. # 10
richard lincourt Accepted Answer
Posts: 0
Joined: 02.03.2021
0
Votes
Undo
we make me turn around since 5 days.. please try to understand


the cloudlinux support said this :

Taras Yasinsky
5 days ago
Greetings,

We're afraid wildcards aren't supported for the ignore list in the UI described at

https://docs.imunifyav.com/imunifyav/#ignore-list and are applicable only for

- per-scan configuration as per https://docs.imunifyav.com/imunifyav/#scan and
- CLI commands as per https://docs.imunifyav.com/cli/#malware.

i need to add /home/*/imap/* in the tab ignore list of imunifyav+ ( not imunify360 ) because its stupid to scan mail for more of 24h hours for 6000 users by servers

you need to add this feature into imunifyav+ ( i pay for that for this product for testing in this moment ( 5 license now .. i going to add it on more servers in the next week )
  1. 29.12.2020 14:12:02
  2. # 11
Sergey Khristich Accepted Answer
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
Hello Richard,
I am sorry for the misunderstanding. Imunify360 does not support wildcard yet: "Wildcards are not supported when adding paths to the Ignore List"
For this, we have a slightly different tool. More details can be found here: https://docs.imunify360.com/faq_and_known_issues/#_21-how-to-edit-watched-and-excluded-patterns-for-malware-scanner
That is, mail directories, as well as some others, are already excluded automatically. As for the planned backup, right there, you can do what will be needed.
As for on-demand, you can add --ignore-mask /home/*/mail/*, and everything will be ignored, as Taras mentioned.
Thank you.
Marketing Manager
  1. 29.12.2020 14:12:37
  2. # 12
Sergey Khristich Accepted Answer
Posts: 504
Joined: 20.05.2019
0
Votes
Undo
no answer ?

and just for your information.. we cannot register on this forum

in this page : https://www.cloudlinux.com/create-account

the captcha said : ERROR for site owner: Invalid site key


Hello,
Thank you for reaching out! We fixed this error. Please try to register again.
Marketing Manager
  • Page :
  • 1


There are no replies made for this post yet.
Be one of the first to reply to this post!
richard lincourt
Submit Your Response
Upload files or images for this discussion by clicking on the upload button below. Supports gif,jpg,png,zip,rar,pdf
• Insert • Remove Upload Files (Maximum File Size: 2 MB)
Captcha
To protect the site from bots and unauthorized scripts, we require that you enter the captcha codes below before posting your question.

EU e-Privacy Directive

We use cookies to ensure you get the best experience using our website and services. Read more about it in our Privacy Policy. Please agree to the use of cookies to proceed. Alternatively, you may disable cookies in your browser at any time.

You have declined cookies. This decision can be reversed.

You have allowed cookies to be placed on your computer. This decision can be reversed.