Phishing phailure

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Martin Sapsed wrote:

> John Wilcock wrote:
>
>> On Thu, 4 Nov 2004 14:53:49 +0000, Martin Sapsed wrote:
>>
>>> I put 4.35.9 up yesterday with
>>>
>>> Find Phishing Fraud = yes
>>>
>>> and yet the attached message got through without being detected (or
>>> picked up by the Clam definitions).
>>
>>
>> Huh? It *was* detected:
>>
>> | <a href=3D"http://3duser.co.kr/b.html"><font
>> color=3D"red"><b>MailScanner
>> |  has detected a possible fraud attempt from "3duser.co.kr" claiming
>> to be
>> | </b></font>
>> https://ibank.barclays.co.uk/fp/1_2x/online/1,,logon,00.html<
>> | /a>
>
>
> By your system and by Julian's, yes, but not by mine! Those red bits
> weren't in the message I sent. There's obviously something amiss on my
> installation - question is, what? I used install.sh in the tar
> installation, HTML::Parser is up to scratch. Phishing detector is
> apparently on in MailScanner.conf.

Did you upgrade the languagues.conf file?

cd /etc/MailScanner/reports/en
upgrade_MailScanner_conf languages.conf languages.conf.rpmnew >
languages.new
mv languages.new languages.conf

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).