Phishing phailure

[Martin Sapsed]

Kai Schaetzl wrote:
> I looked in your attachment and it doesn't contain any HTML here. Could
> be that our MailScanner stripped that (as I have ordered it to do) or
> that your MailScanner does the same thing? I assume that the check is
> done *before* any stripping, but if not, then detection may fail in
> such a case. I agree the possibility is small, but I wanted to mention
> it.

Certainly the original message was quite minimal but the link/label
combination were valid html.

The whole message was type text/html and the body was just a body rather
than text and html versions. I wondered whether maybe the message was
formed in such a way that Julian's checks didn't get triggered?

Cheers,

Martin

--
Martin Sapsed            "I've got 8 little fingers and only 2 thumbs,
Microcomputer Support                      won't you leave me in peace
Information Services                        while I get the job done?"
University of Wales, Bangor             Chris Rea, "I'm working on it"

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).