Please help me with file ignore

Community forum to discuss cxs.
If you believe that there is a problem with your cxs installation and want support then, as a paid product, you should use the helpdesk after having consulted the documentation.
Post Reply
fzamaan
Junior Member
Posts: 6
Joined: 27 Nov 2013, 13:07
Location: Sri Lanka

Please help me with file ignore

Post by fzamaan »

Hello,

I am in badly need of getting two php files ignored from qurantain. i did the following steps. but still it qurantaines :(

1.
#touch /etc/cxs/cxs.ignore
#chmod 644 /etc/cxs/cxs.ignore

2.
#nano cxs.ignore

and added the two files to the bottom of the existing content


......
hdir:/etc
hdir:/mail
hdir:/tmp
hdir:/.cagefs
hdir:/.fantasticodata
hdir:/.rvsitebuilder
hdir:/.sqmaildata
hdir:/.trash
hdir:/.quarantine
hdir:/quarantine_clamavconnector
hsym:/access-logs
hfile:/public_html/cgi-bin/randhtml.cgi
hfile:/public_html/cgi-bin/entropybanner.cgi
hfile:/public_html/cgi-bin/cgiemail
hfile:/public_html/cgi-bin/cgiecho
hfile:/public_html/cgi-bin/cpdownload/cpaneldownacct.cgi
hfile:/public_html/cgi-bin/cpdownload/cpaneldownload.cgi
hfile:/public_html/cgi-bin/cpdownload/cpanelkill.cgi
hfile:/public_html/cgi-bin/cpdownload/cpanelwrap.c
hfile:/public_html/cgi-bin/cpdownload/cpanelwrap.cgi
pfile:^/tmp/clamav-.*
pdir:^/tmp/clamav-.*
pfile:^/tmp/cxs_.*
md5sum:f3c8aaf882d1ed25a7f5fe7fd2ee4d9d

file:/home/mindcalc/public_html/wp-content/themes/classroom_math_ote061/functions.php
file:/home/mindcalc/public_html/wp-content/themes/classroom_math_ote061/footer.php

Kindly help me with this issue.

Thank you
john
Michael_Inet-Design
Junior Member
Posts: 6
Joined: 06 Oct 2015, 23:45

Re: Please help me with file ignore

Post by Michael_Inet-Design »

Probably overkill, but try:

hfile:/public_html/wp-content/themes/classroom_math_ote061/functions.php
hfile:/public_html/wp-content/themes/classroom_math_ote061/footer.php

That should test if the "file:" format is non-functional or if you've made a typo in your file path/name.

Best,
Michael
fzamaan
Junior Member
Posts: 6
Joined: 27 Nov 2013, 13:07
Location: Sri Lanka

Re: Please help me with file ignore

Post by fzamaan »

Hello,
i tried all this and no luck :(

hfile:/home/mindcalc/public_html/wp-content/themes/classroom_math_ote061/functions.php
hfile:/home/mindcalc/public_html/wp-content/themes/classroom_math_ote061/footer.php
hfile:/public_html/wp-content/themes/classroom_math_ote061/functions.php
hfile:/public_html/wp-content/themes/classroom_math_ote061/footer.php
Sarah
Moderator
Posts: 837
Joined: 09 Dec 2006, 22:49

Re: Please help me with file ignore

Post by Sarah »

Have you added --ignore /etc/cxs/cxs.ignore to your cxs command, i.e. in /etc/cxs/cxswatch.sh?
fzamaan
Junior Member
Posts: 6
Joined: 27 Nov 2013, 13:07
Location: Sri Lanka

Re: Please help me with file ignore

Post by fzamaan »

oh no idea about that. can you kindly give me some more info on --ignore and cxswatch.sh?
you have not mentioned anything related to cxswatch.sh here at "Dealing with false-positives in cxs"
viewtopic.php?t=2910
Sarah
Moderator
Posts: 837
Joined: 09 Dec 2006, 22:49

Re: Please help me with file ignore

Post by Sarah »

I assume you are using cxswatch. If you want cxswatch to ignore anything, you have to tell it where to find the file with the ignore information. The only way to configure this is to modify the command line in the file /etc/cxs/cxswatch.sh. In the cxs documentation, all of the settings to be used with cxs commands are described, including --ignore.

Edit cxswatch.sh and add "--ignore /etc/cxs/cxs.ignore" to the cxs command line, and then restart cxswatch.
fzamaan
Junior Member
Posts: 6
Joined: 27 Nov 2013, 13:07
Location: Sri Lanka

Re: Please help me with file ignore

Post by fzamaan »

Hello,

i figured it out, i added the thing to the end of the line and it works now.
Thank you for the support.

/usr/sbin/cxs --options -wW --Wstart --allusers --www --smtp --mail root --quarantine /home/quarantine/ --Wmaxchild 3 --Wloglevel 0 --Wsleep 3 --filemax 0 --Wrateignore 300 --ignore /etc/cxs/cxs.ignore
fzamaan
Junior Member
Posts: 6
Joined: 27 Nov 2013, 13:07
Location: Sri Lanka

Re: Please help me with file ignore

Post by fzamaan »

Thanks sarah for the additional information.
Post Reply