Sanesecurity's distibution of multiple sourced data (sansesecurity, CRDF, winnow and others) have url detections in them but you really need to add SURBL and Spamhaus' DBL in content filtering as well.
On Dec 18, 2014, at 11:50 AM, Arnaud Jacques / SecuriteInfo.com <webmas...@securiteinfo.com> wrote: > Le jeudi 18 décembre 2014, 15:29:13 polloxx a écrit : >> Since more and more malware is not attached to a mail but only an url to >> it, detecting it is challenge. Is there any good url scanner avalable for >> Clamav? > > https://www.malwarepatrol.net > > Their signatures for Clamav are based on URLs. May be a good start. > > -- > Best regards, > > Arnaud Jacques > SecuriteInfo.com > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
