Page 1 of 1

Mailscanner plugin for checking download URLs

Posted: 23 Nov 2017 06:51
by DeRaptor
Hi,

we often get mails with an embbeded download URL, wich contains either a Word/Excel/ZIP archiv infected with a virus/trojan - an example mail like this:

--------------------
Dear Sirs,

here is the bill you requested:

Here is your bill
--------------------

These mails pass the mailscanner / spamassassin withou recognized as spam because they are not listed in Pyzor / Razor, and these message have no further conspicuous features to catch them as spam.

Is there a MailScanner plugin, which checks the download URL, send the downloaded document through the virus scanner und informs MailScanner of the result, so that MailScanner can take further actions ?


Best regards,
Frank

Btw: i also ask the same question at the MailScanner mailing list.

Re: Mailscanner plugin for checking download URLs

Posted: 24 Nov 2017 15:18
by nicola.piazzi
Hi,
This is done automaticaly by antivirus that scans each message
EFA includes CLAM but if you want is very easy to add SOPHOS so you can have 2 engines

Re: Mailscanner plugin for checking download URLs

Posted: 25 Apr 2018 10:02
by ovizii
nicola.piazzi wrote: 24 Nov 2017 15:18 Hi,
This is done automaticaly by antivirus that scans each message
EFA includes CLAM but if you want is very easy to add SOPHOS so you can have 2 engines
Are you sure the AV covers this? I thought AV only checks attachments and not links.

Re: Mailscanner plugin for checking download URLs

Posted: 25 Apr 2018 10:24
by pdwalker
interesting.

Do you have an actual link to one of these files that I could test it on?

Re: Mailscanner plugin for checking download URLs

Posted: 26 Jul 2021 11:11
by jondo007
I have same question, is it possible to check and disable download links ?
We often getting spams like this one (see attached file) with download links from one drive ore something else...