I noticed the libcurl support to follow urls. I tried setting up a test by sending
myself an email with a link to a virus on a test web server but it doesn't pick up
there's a virus. I have curl-devel installed and when I compiled clamav it picked up
that I had libcurl. Is this still very Alpha or am I doing something wrong?
On the Web server...
[EMAIL PROTECTED] root]# clamscan /var/www/html/document.zip
/var/www/html/document.zip: Worm.Mydoom.M FOUND
After I receive the email I save it into mbox format:
[EMAIL PROTECTED] root]# clamscan --mail-follow-url url-test-mail
url-test-mail: OK
Contents of url-test-mail:
>From [EMAIL PROTECTED] Fri Aug 20 08:02:16 2004
Return-Path: <[EMAIL PROTECTED]>
Received: from ns2b.hillsboroughcounty.org (ns2b.hillsboroughcounty.org
[207.156.7.21]) by impmail.dnsalias.com (8.12.11/8.12.10) with ESMTP id
i7KC2GMX009647 for <[EMAIL PROTECTED]>; Fri, 20 Aug 2004
08:02:16 -0400
Received: from simpsonb.hillsboroughcounty.org (firewall.hillsborough.fl.us
[207.156.7.1] (may be forged)) by ns2b.hillsboroughcounty.org
(8.12.11/8.12.11) with ESMTP id i7KC2HZD018881 for
<[EMAIL PROTECTED]>; Fri, 20 Aug 2004 08:02:17 -0400
Subject: Test url
From: Brett Simpson <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Content-Type: text/plain
Message-Id: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Date: Fri, 20 Aug 2004 08:02:17 -0400
Content-Transfer-Encoding: 8bit
http://172.27.228.145/document.zip
-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
