| HTTP Anti-Virus Proxy http://havp.hege.li/forum/ |
|
| General question about Phishing-Sites http://havp.hege.li/forum/viewtopic.php?f=3&t=476 |
Page 1 of 1 |
| Author: | karesmakro [ 28 Sep 2009 10:16 ] |
| Post subject: | General question about Phishing-Sites |
This weekend I made some tests with phising sites and found they were not blocked! One example testpage: http://www.mozilla.com/firefox/its-a-trap.html Output: Code: 28/09/2009 09:10:52 127.0.0.1 GET 200 http://www.mozilla.com/img/tignish/template/header-background.png 475+545 VIRUS ClamAV: Sanesecurity.Rogue.295.UNOFFICIAL But the site was not blocked. What's the reason about? Clamav is also finding a virus: Code: clamdscan -v header-background.png /root/clam-test/header-background.png:Sanesecurity.Rogue.295.UNOFFICIAL FOUND regards |
|
| Author: | hege [ 30 Sep 2009 08:07 ] |
| Post subject: | Re: General question about Phishing-Sites |
It does what it's supposed to. It's blocking the IMAGE that's supposedly a virus. There is no way you can block a complete page based on that. |
|
| Author: | karesmakro [ 30 Sep 2009 08:56 ] |
| Post subject: | Re: General question about Phishing-Sites |
O.K., I understand the difference ... Thank you very much! regards |
|
| Page 1 of 1 | All times are UTC + 2 hours [ DST ] |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|