Phishing net improvement

[Roger Jochem]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

We had a problem here, because a software we use here generates some faulty
html code, like the sample:

<td align="left" bgcolor="#A2C8E8" style="color: #000080; font-family=
: verdana; font-size: 10; font-style: normal; font-weight: normal; ">&nbsp;=
Jun/2004</a></td>

As you can see, there is the </a> there, but there is no <a ...> tag...
MailScanner replace this </a> with some random code (some times other people
e-mails, some times parts of another e-mails... Very strange... Is there any
way to fix that in MailScanner?

Regards

Roger Jochem

----- Original Message -----
From: "Julian Field" <mailscanner at ECS.SOTON.AC.UK>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Monday, November 08, 2004 9:48 AM
Subject: Phishing net improvement


> Here is an improvement to the phishing fraud detector code. It improves
the
> handling of html tags buried in the link, which has been used in a new
> Paypal phish this morning.
> --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).