checking URL senden in Body

[kropla]

Hello everyone ..
quick question .. is there any posibility if mail going from external and has some url in body message .. that proxmox check this url and if there is an some virous the block message ... (for example https://www.ikarussecurity.com/wp-content/downloads/eicar_com.zip )

 

[Stoiko Ivanov]

PMG runs the mails through ClamAV and SpamAssassin by default.
None of the two try to 'click' on links inside messages (this would also be quite intensive w.r.t. used resources)

usually if a link contains malicious material it gets listed in one or multiple DNSBLs containing URIs (e.g. uribl) - and through that the mail gets assigned a higher spam-score.

Regarding your question whether there is any possibility to have PMG do that - you could use PMG's custom check script interface, which has access to the complete mail and can tag it as virus or spam - but you need to configure/write such a script yourself - it is not provided with PMG

https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_custom_check

I hope this helps!

 

[kropla]

PMG runs the mails through ClamAV and SpamAssassin by default.
None of the two try to 'click' on links inside messages (this would also be quite intensive w.r.t. used resources)

usually if a link contains malicious material it gets listed in one or multiple DNSBLs containing URIs (e.g. uribl) - and through that the mail gets assigned a higher spam-score.

Regarding your question whether there is any possibility to have PMG do that - you could use PMG's custom check script interface, which has access to the complete mail and can tag it as virus or spam - but you need to configure/write such a script yourself - it is not provided with PMG

https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_custom_check

I hope this helps!

Thanks for reply - tell me more - is this script should be only In bash script or it can be also python script ?

 

[Stoiko Ivanov]

Thanks for reply - tell me more - is this script should be only In bash script or it can be also python script ?

You can write it in any language you want - the reference documentation just describes the API the script needs to have (what to expect as input, what to write as output)

 

[hata_ph]

Another option is spamassasin custom rules under /etc/mail/spamassasin/custom.cf

https://gist.github.com/jult/9bfdc4d07b44be01a02cc2aaf25b7c39