Phishing phailure

Martin Sapsed m.sapsed at BANGOR.AC.UK
Fri Nov 5 15:36:49 GMT 2004

Kai Schaetzl wrote:
> I looked in your attachment and it doesn't contain any HTML here. Could
> be that our MailScanner stripped that (as I have ordered it to do) or
> that your MailScanner does the same thing? I assume that the check is
> done *before* any stripping, but if not, then detection may fail in
> such a case. I agree the possibility is small, but I wanted to mention
> it.

Certainly the original message was quite minimal but the link/label
combination were valid html.

The whole message was type text/html and the body was just a body rather
than text and html versions. I wondered whether maybe the message was
formed in such a way that Julian's checks didn't get triggered?



Martin Sapsed            "I've got 8 little fingers and only 2 thumbs,
Microcomputer Support                      won't you leave me in peace
Information Services                        while I get the job done?"
University of Wales, Bangor             Chris Rea, "I'm working on it"

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ ( and
the archives (

More information about the MailScanner mailing list