Mailto's being marked as detected fraud attempt.

[Julian Field]

I have just tested it with
Contact <a href="mailto:steve.swaney at fsl.com">Steve.Swaney at fsl.com</a>
and it allowed it through just fine.


On 17/11/04 8:04 am, "Quentin Campbell" <Q.G.Campbell at NEWCASTLE.AC.UK>
wrote:

> Julian
>
> I installed your latest version of Message.pm (the 166111 byte version)
> early on Tuesday.
>
> Prior to that the log entries read:
>
>   "Found phishing fraud from mailto:bloggs at domain.com claiming to be
> bloggs at domain.com"
>
> After installing this fixed version (166111 bytes) the logs entries now
> read:
>
>   "Found phishing fraud from dave at somewhere.com claiming to be
> mailto:dave at somewhere.com"
>
> The latter looks more believable but still not desirable in my view. Why
> can't this special case be ignored?
>
> I made the change to the 166111 byte version at about 08:20 on Tuesday.
> Later that day complaints started coming in about messages being
> "mangled". The complainants usually did not include the affected
> message. When they did it was clear the "mangled" messages had actually
> been received on the Monday, _before_ I installed your latest
> Message.pm.

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!