Home » Kerio User Forums » Kerio Connect » Eliminate Phishing Emails (A seemingly simple filter to eliminate all phishing emails)

Messages: 15
Karma: 3
Send a private message to this user
With respect to phishing and masked URLs - is there some way to have a filter look at any URL that's presented as HTML - i.e., there's an href and also a text representation, and if the text representation that doesn't match the domain of the actual link then it be flagged as phishing - e.g.:

<a href="http://123.456.789.10/phishing.html"> http://webmail.example.com/login.html </a>

It's completely valid to have a link where the text is something different - e.g. a link that says Click Here! but to have a link where the text looks like it's a URL but it's pointing to a different domain to the actual URL, then I've never seen one of these used for good.

I'd really like to be able to flag every email that has a non-matching URL as spam and delete it immediately.

kai howells
automatica - specialist technical support for creative professionals

Messages: 342
Karma: 46
Send a private message to this user
You can take a look at a couple of different options. I have not used them, so I don't know how effective they really are.

https://wiki.apache.org/spamassassin/CustomPlugins - The Wombat (paid) plugin for Spam Assassin

http://www.scamnailer.info/documentation.html - A ClamAV sig file to detect phishing

There are some SA suggestions here
http://www.gossamer-threads.com/lists/spamassassin/users/127 702

Previous Topic: 32/64 Bit Issue
Next Topic: Empty cache each day
Goto Forum:

Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Nov 15 20:27:05 CET 2018

Total time taken to generate the page: 1.03998 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.