Help with "Found a form in HTML message"

Julian Field mailscanner at ecs.soton.ac.uk
Sat Aug 30 12:38:23 IST 2003


You can edit pretty much everything already, through either the reports
themselves or the languages.conf file.

At 23:31 29/08/2003, you wrote:
>   So on this note, what I would like the preable to say, is not that a
>virus in in the message, but that the message violates our rules, even if
>the message is a virus (after all, receiving a virus does violate our
>e-mail rules).  Of course, what I would like might be different than what
>others like.  I used to change the code that had the message, now I change
>the NoticeHeading in the languages.conf file.  Maybe it works to start
>putting more and more of these informational messages in the
>languages.conf file.
>
>   Just a thought.
>
>
>rf
>
>On Fri, 29 Aug 2003, Julian Field wrote:
>
> > At 15:54 29/08/2003, you wrote:
> > >I guess I am a little confused with the classification of "Found a form in
> > >HTML message" and why it is classified as a Virus or Virus detected. I
> > >would think it is better to put this in the same classification as Bad
> > >Filename or better yet, Policy Enforcement. I would think that in most
> > >cases these are not Viri but something else so is there a way to do this?
> > >That is sending something other then "Virus detected" to the end user?
> >
> > I'll take a look.
> >
> >
> >
> > >Also, I am assuming that this is the "Allow External Message Bodies"
> > >setting in the MailScanner.conf file that is doing this?
> >
> > No, it's this:
> >
> > # Do you want to allow <Form> tags in email messages? This is a bad idea
> > # as these are used as scams to pursuade people to part with credit card
> > # information and other personal data.
> > # This can also be the filename of a ruleset.
> > Allow Form Tags = no
> >
> >
> >
> > >Subject:
> > >Warning: E-mail viruses detected
> > >
> > >The following e-mail messages were found to have viruses in them:
> > >
> > >     Sender: italy at xy62.com
> > >IP Address: 207.178.208.29
> > >  Recipient: xxxxxxx at xxxxxxx.xxx
> > >    Subject: Custom Italian Charm Bracelets
> > >  MessageID: h7SM6Vka029748
> > >     Report: Found a form in HTML message
> > >
> > >
> > >Any help would be greatly appreciated.
> >
> > --
> > Julian Field
> > www.MailScanner.info
> > MailScanner thanks transtec Computers for their support
> >

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support



More information about the MailScanner mailing list