Mailscanner plugin for checking download URLs

Request and discuss new features you would like to have.
Post Reply
DeRaptor
Posts: 15
Joined: 25 Oct 2017 15:47

Mailscanner plugin for checking download URLs

Post by DeRaptor » 23 Nov 2017 06:51

Hi,

we often get mails with an embbeded download URL, wich contains either a Word/Excel/ZIP archiv infected with a virus/trojan - an example mail like this:

--------------------
Dear Sirs,

here is the bill you requested:

Here is your bill
--------------------

These mails pass the mailscanner / spamassassin withou recognized as spam because they are not listed in Pyzor / Razor, and these message have no further conspicuous features to catch them as spam.

Is there a MailScanner plugin, which checks the download URL, send the downloaded document through the virus scanner und informs MailScanner of the result, so that MailScanner can take further actions ?


Best regards,
Frank

Btw: i also ask the same question at the MailScanner mailing list.

nicola.piazzi
Posts: 255
Joined: 23 Apr 2015 09:45

Re: Mailscanner plugin for checking download URLs

Post by nicola.piazzi » 24 Nov 2017 15:18

Hi,
This is done automaticaly by antivirus that scans each message
EFA includes CLAM but if you want is very easy to add SOPHOS so you can have 2 engines

ovizii
Posts: 441
Joined: 11 May 2016 08:08

Re: Mailscanner plugin for checking download URLs

Post by ovizii » 25 Apr 2018 10:02

nicola.piazzi wrote:
24 Nov 2017 15:18
Hi,
This is done automaticaly by antivirus that scans each message
EFA includes CLAM but if you want is very easy to add SOPHOS so you can have 2 engines
Are you sure the AV covers this? I thought AV only checks attachments and not links.

User avatar
pdwalker
Posts: 1137
Joined: 18 Mar 2015 09:16

Re: Mailscanner plugin for checking download URLs

Post by pdwalker » 25 Apr 2018 10:24

interesting.

Do you have an actual link to one of these files that I could test it on?

Post Reply