RES: Best way to test links?

[Ken A]

Mauricio wrote:
> Hi,
> I change the default in clamav-wrapper to:
> 
> ScanOptions="--mail-follow-urls".
> 
> In clamscan manual they say that this feature opens the HTML file, follow
> URLs, download and scan them.
> 
> So, if I send an e-mail to MS server (HTML attach) with a link to
> http://localhost/eicar.com (and I can manually follow this link and get
> eicar using wget in MS server), I think that clamav will make what it says.
> 
> Anyone uses this clamscan feature or another AV/program that blocks this
> kind of message?

If clamscan determined that the url is 'clean' - it can be 'dirty' the 
next minute, so what's the point? Don't trust urls in email, period.
Ken

> 
> Thanks in advance,
> Mauricio