Mailscanner plugin for checking download URLs

Request and discuss new features you would like to have.
Post Reply
DeRaptor
Posts: 28
Joined: 25 Oct 2017 15:47

Mailscanner plugin for checking download URLs

Post by DeRaptor »

Hi,

we often get mails with an embbeded download URL, wich contains either a Word/Excel/ZIP archiv infected with a virus/trojan - an example mail like this:

--------------------
Dear Sirs,

here is the bill you requested:

Here is your bill
--------------------

These mails pass the mailscanner / spamassassin withou recognized as spam because they are not listed in Pyzor / Razor, and these message have no further conspicuous features to catch them as spam.

Is there a MailScanner plugin, which checks the download URL, send the downloaded document through the virus scanner und informs MailScanner of the result, so that MailScanner can take further actions ?


Best regards,
Frank

Btw: i also ask the same question at the MailScanner mailing list.
nicola.piazzi
Posts: 388
Joined: 23 Apr 2015 09:45

Re: Mailscanner plugin for checking download URLs

Post by nicola.piazzi »

Hi,
This is done automaticaly by antivirus that scans each message
EFA includes CLAM but if you want is very easy to add SOPHOS so you can have 2 engines
ovizii
Posts: 463
Joined: 11 May 2016 08:08

Re: Mailscanner plugin for checking download URLs

Post by ovizii »

nicola.piazzi wrote: 24 Nov 2017 15:18 Hi,
This is done automaticaly by antivirus that scans each message
EFA includes CLAM but if you want is very easy to add SOPHOS so you can have 2 engines
Are you sure the AV covers this? I thought AV only checks attachments and not links.
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: Mailscanner plugin for checking download URLs

Post by pdwalker »

interesting.

Do you have an actual link to one of these files that I could test it on?
jondo007
Posts: 6
Joined: 16 Mar 2018 12:41

Re: Mailscanner plugin for checking download URLs

Post by jondo007 »

I have same question, is it possible to check and disable download links ?
We often getting spams like this one (see attached file) with download links from one drive ore something else...
Attachments
efa_1.JPG
efa_1.JPG (21.84 KiB) Viewed 4153 times
Post Reply