phishkill: skip mailto stuff?

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

But this appears to be
<mailto:address> mailto:address
I don't currently look for < or > characters, I guess I could add that.
Then it would start mailto: and so be spotted.

Jeff A. Earickson wrote:

> Julian,
>
> Running 4.36.1 with version 1.126.2.172 of Message.pm.  I got a
> complaint about this:
>
>> If you are having problems, please email myself (Ronald.Aho at jenzabar.net
>> <<mailto:Ronald.Aho at jenzabar.net>MailScanner has detected a possible
>> fraud
>> attempt from "ronald.aho at jenzabar.net" claiming to
>> be<mailto:Ronald.Aho at jenzabar.net> mailto:Ronald.Aho at jenzabar.net>)
>> and Shirley
>> High (shirley.high at jenzabar.net
>> <<mailto:shirley.high at jenzabar.net>MailScanner
>> has detected a possible fraud attempt from
>> "shirley.high at jenzabar.net" claiming
>> to be<mailto:shirley.high at jenzabar.net>
>> mailto:shirley.high at jenzabar.net>)
>> directly and we will forward it to the appropriate people. We will
>> respond
>
>
> I thought that later versions of anti-phishing were supposed to ignore
> mailto URLs?
>
> Jeff Earickson
> Colby College
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!