Re: [exim] URL in content mail

Top Page
Delete this message
Reply to this message
Author: Dennis Davis
Date:  
To: exim-users
Subject: Re: [exim] URL in content mail
On Tue, 11 Dec 2018, Sławomir Dworaczek via Exim-users wrote:

> From: Sławomir Dworaczek via Exim-users <exim-users@???>
> To: exim-users@???
> Date: Tue, 11 Dec 2018 13:22:22 +0100
> Subject: [exim] URL in content mail
>
> Is it possible to delete the mail containing the content of the url
> eg. content in mail is http://url address.


You don't say exactly why you want to reject such emails. I suspect
they may be the usual collection of spam, phishing emails etc. If
so, then the ClamAV virus scanner might help. I remember it being
useful for this purpose a few years ago. I haven't worked in this
area for a while. But I suspect that things haven't changed too
much.

The ClamAV virus scanner integrates well with exim. Usage is
described in Chapter 44 of the exim manual. If you're running this
virus scanner, you may find that some of the unofficial third-party
signatures will do at least part of the rejection for you.

Compiling lists of dodgy URLs for yourself is an endless game of
whack-a-mole[1]. The novelty of doing this soon wears off. Better
if ClamAV virus signatures can recognise most of this stuff and
reject it for you.

See:

https://sanesecurity.com/

and:

https://sanesecurity.com/usage/signatures/


[1] https://en.wikipedia.org/wiki/Whac-A-Mole
--
Dennis Davis <dennisdavis@???>