The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Use ClamAV to stop phising

Discussion in 'cPanel Developers' started by gflamerich, Oct 3, 2005.

  1. gflamerich

    gflamerich Well-Known Member

    Joined:
    Jul 21, 2003
    Messages:
    122
    Likes Received:
    0
    Trophy Points:
    16
    Hi
    We are using clamav with mailscanner with excelents results, but has a little problem with some phising mails. We have been blocked by an ISP because they received phising mails that are redirected to their clients from our servers.
    We have notice at our logs that hey use ClamAV to detect phising, we would like to do so, but couldn't find the way tag messages as viruses to trigger the virus action rules.
    We don't want to enable mailscanner phising optios, just use the antivirus sacanner to check for phising.

    We are using ClamAV 0.87 and mailscanner 4.45.4 with clamavmodule
    The message at our logs is 2005-10-02 05:46:21 1EM0Py-0008Nq-L5 ** otheruser@otherdomain.tld <user@domain.tld> R=lookuphost T=remote_smtp: SMTP error from remote mail server after end of data: host relay.otherdomain.tld [###.###.###.###]: 554 5.7.1 virus HTML.Phishing.Bank-1 detected by ClamAV - http://www.clamav.net

    Thanks
     
    #1 gflamerich, Oct 3, 2005
    Last edited: Oct 3, 2005
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    So long as ClamAV is scanning in and outgoing emails, it should pick up such entries as those phishing "viruses" are part of the ClamAV definitions file, they should be detected automatically.
     
  3. gflamerich

    gflamerich Well-Known Member

    Joined:
    Jul 21, 2003
    Messages:
    122
    Likes Received:
    0
    Trophy Points:
    16
    Thanks Jonathan, but the problem is they aren't. We know clamav is working but seems that does't with phising.
     
    #3 gflamerich, Oct 4, 2005
    Last edited: Oct 4, 2005
Loading...

Share This Page