Hi,
we often get mails with an embbeded download URL, wich contains either a Word/Excel/ZIP archiv infected with a virus/trojan - an example mail like this:
--------------------
Dear Sirs,
here is the bill you requested:
Here is your bill
--------------------
These mails pass the mailscanner / spamassassin withou recognized as spam because they are not listed in Pyzor / Razor, and these message have no further conspicuous features to catch them as spam.
Is there a MailScanner plugin, which checks the download URL, send the downloaded document through the virus scanner und informs MailScanner of the result, so that MailScanner can take further actions ?
Best regards,
Frank
Btw: i also ask the same question at the MailScanner mailing list.
Mailscanner plugin for checking download URLs
-
- Posts: 389
- Joined: 23 Apr 2015 09:45
Re: Mailscanner plugin for checking download URLs
Hi,
This is done automaticaly by antivirus that scans each message
EFA includes CLAM but if you want is very easy to add SOPHOS so you can have 2 engines
This is done automaticaly by antivirus that scans each message
EFA includes CLAM but if you want is very easy to add SOPHOS so you can have 2 engines
Re: Mailscanner plugin for checking download URLs
Are you sure the AV covers this? I thought AV only checks attachments and not links.nicola.piazzi wrote: ↑24 Nov 2017 15:18 Hi,
This is done automaticaly by antivirus that scans each message
EFA includes CLAM but if you want is very easy to add SOPHOS so you can have 2 engines
Re: Mailscanner plugin for checking download URLs
interesting.
Do you have an actual link to one of these files that I could test it on?
Do you have an actual link to one of these files that I could test it on?
Re: Mailscanner plugin for checking download URLs
I have same question, is it possible to check and disable download links ?
We often getting spams like this one (see attached file) with download links from one drive ore something else...
We often getting spams like this one (see attached file) with download links from one drive ore something else...
- Attachments
-
- efa_1.JPG (21.84 KiB) Viewed 4369 times