Sietse van Zanen wrote:
And correct me if I'm wrong, but isn't ClamAV able to recursively scan
URL's contained within e-mails?
Yes, with the MailFollowURLs option. Thankfully, it's disabled by default.
Aside from increasing bandwidth use, exposing the virus checker to
potential DOS conditions, and exposing the mail server to potential
malware, there are plenty of URLs which perform actions that the user
might want to have some say in, such as:
- Unsubscribe links
- Web bugs
- Survey results
- Moderation decisions (click URL A to accept, URL B to reject)
and so on.
--
Kelson Vibber
SpeedGate Communications <www.speed.net>
