Török Edwin wrote:
> On 2008-08-01 16:40, Jiri Demel wrote:
>
>> Is there any possiility to have some sort of a local whitelist
>> for the phishing heuristics in ClamAV?
>> Or should I try to "solve" it in MimeDefang from which I call ClamAV?
>>
>
he real target of the link is tinyurl.com, get the target of
the redirection from the tinyurl.com server and compare it with
the visible part of the link. If the redirected url has the same domain
as the visible link, it is not indication of phishing.
Have a nice day
Jiri Demel
_
