anti-phishing mode shot down by mgmt

[Schmitt,Andy C - JHSS]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

We use Outlook in my agency, and we can't do bounces because users forward mail without the headers. To get headers, we tell our users to do the following:

Tell them you need them to attach the message, not forward it. To do it, they should start a new message to you and drag the spam message from their inbox with their mouse to the message to you. 

They'll get visual feedback when they see the spam as an attachment in their mail. 
Outlook supports drag and drop, and many users are more comfortable with this. On your end, when you get it, you can open it and see everything, with the original headers in View->Options, etc.

Still not as simple as a redirect button, but I think easier than having them navigate menus...:)

Andy Schmitt


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
Behalf Of Julian Field
Sent: Thursday, December 02, 2004 9:53 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: anti-phishing mode shot down by mgmt


Not as simple as having a "Redirect" button though. Most users appear to
be incapable of doing this in Outlook.

Michael St. Laurent wrote:

>In Outlook you can get the mail headers by right clicking on the message and
>choosing "Options" from the context menu.  The headers will be in the
>"Internet headers:" box.  Even though the box is greyed out they can use the
>standard windows methods to copy and paste them.
>
>Jeff A. Earickson <> wrote:
>
>
>>The pointy-haired boss kept complaining about the NY Times emails.
>>I added "From:   *@*.nytimes.com no" to my phishing ruleset, but he
>>still complained (guess I didn't get the rule right).  To add insult
>>to injury, this guy uses Outlook for his email reader so he can't even
>>send me a complete email example with mail headers and everything.
>>This from our head of ITS, and our official policy is "we don't
>>support Outlook, use Eudora".   Arrgh.  I don't subscribe to the
>>NY Times email service myself.
>>
>>Jeff
>>
>>On Thu, 2 Dec 2004, Julian Field wrote:
>>
>>
>>
>>>Date: Thu, 2 Dec 2004 17:27:22 +0000
>>>From: Julian Field <mailscanner at ECS.SOTON.AC.UK>
>>>Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
>>>To: MAILSCANNER at JISCMAIL.AC.UK
>>>Subject: Re: anti-phishing mode shot down by mgmt
>>>
>>>Have they got any examples of it crying wolf? I agree it's not
>>>perfect, but it can't be. Perhaps you should setup your own in-house
>>>phishing scam to provide the service locally? :-)
>>>
>>>Jeff A. Earickson wrote:
>>>
>>>
>>>
>>>>Julian,
>>>>
>>>>Management has asked me to turn off anti-phishing, which I did
>>>>when I upgraded to 4.36.4 this morning.  They had gotten annoyed
>>>>by it and thought it cried wolf too much.  We are back to the
>>>>Darwin mode of "a fool and his money are soon parted."
>>>>
>>>>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!