Add graylist support

Created on 22 February 2024, 10 months ago
Updated 24 February 2024, 10 months ago

Problem/Motivation

We're finding that ClamAV is reporting some files that are not expected to have viruses are reporting that they do, especially very large (100s of megabytes) Excel files.

We'd like to add a feature which, similar to email systems, would initialy deny a file. But on a subsequent upload within a short time window, allows the file.

Appropriate logs are added to ensure we can audit it, and puts the burden of responsibility on the uploader.

Proposed resolution

Add an opt in graylist feature.

Remaining tasks

Review

User interface changes

  • New configuration settings on form.
  • Error messages are tweaked.

API changes

Data model changes

Feature request
Status

Needs review

Version

2.0

Component

Code

Created by

🇦🇺Australia dpi Perth, Australia

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

  • Issue created by @dpi
  • 🇦🇺Australia dpi Perth, Australia

    This also adds the first test for the project, so testing will need to be set up on Gitlab.

    I'd also like to ask if you're looking for a maintainer. The code could use a lot of love, its very much still stuck in 2015.

  • 🇦🇺Australia dpi Perth, Australia

    dpi changed the visibility of the branch 3423090-clamav-graylist to hidden.

  • Merge request !10Add graylist support → (Open) created by dpi
  • Issue was unassigned.
  • Status changed to Needs review 10 months ago
  • 🇦🇺Australia dpi Perth, Australia
  • 🇬🇧United Kingdom mcdruid 🇬🇧🇪🇺

    Thanks for the offer - I've added you as a maintainer.

    This new feature makes me slightly nervous, but I can see why it might be a pragmatic solution in some cases.

    I'm pleased to see that there's logging, a specific permission for it, and that it's not enabled by default.

    It'd be great if you can do some housekeeping on the module, including getting it setup for properly for gitlab.

    Thanks again.

  • 🇦🇺Australia dpi Perth, Australia

    Thanks @mcdruid, this is absolutely an opt-in feature.

    I'll get started shortly, I'll probably end up creating a 3.x with the same feature and config set. Mostly to raise minimum requirements, and to signify code changes. I dont intend to change behaviour, other than this issue and maybe other issues, pending queue triage.

Production build 0.71.5 2024