Mailto's being marked as detected fraud attempt.

Martin Hepworth martinh at SOLID-STATE-LOGIC.COM
Wed Nov 17 14:10:30 GMT 2004


I use a ruleset for the phishing detection in MS, rather than
whitelisting in spam.assassin.pref.conf which helps, but is a pain to
setup...

--
Martin Hepworth
Senior Systems Administrator
Solid State Logic Ltd
tel: +44 (0)1865 842300

Randal, Phil wrote:

> You probably can't.
>
> One of our biggest headaches here is so-called "legitimate" newsletters
> which, to the untrained eye, are indistinguishable from spam.  They use
> the same bulk-emailers that spammers do, and insist on redirecting via
> some suspicious link, and contain dodgy html markup.
>
> I personally see these newsletters as being part of the problem.  People
> who should know better are often the worst offenders, too.
>
> Whitelisting leaves you open to all sorts of garbage (even
> whitelist_from if the spammer runs their own poisoned reverse DNS
> lookups).
>
> Cheers,
>
> Phil
>
> ----
> Phil Randal
> Network Engineer
> Herefordshire Council
> Hereford, UK
>
>
>>-----Original Message-----
>>From: MailScanner mailing list
>>[mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Julian Field
>>Sent: 17 November 2004 12:17
>>To: MAILSCANNER at JISCMAIL.AC.UK
>>Subject: Re: Mailto's being marked as detected fraud attempt.
>>
>>How could I improve it?
>>
>>


--



**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list