anti-phishing ruleset, still no cigar

[Mark Nienberg]

On 17 Nov 2004 at 15:03, Jeff A. Earickson wrote:
> I'm beating my head against the wall on this anti-phishing ruleset.  The
> email gets actually sent from xyz.com, with a "from" line of colby, like
> so (from the mail headers):

The "From" in this case is the "envelope-from".  Have a look at the header "X-
MailScanner-From" to see what that is.

Also, all of the examples in the rules/README file are like this:

*@xyz.com

I'm not sure if that is necessary or not.
--
Mark W. Nienberg, SE
Tipping Mar + associates
1906 Shattuck Ave
Berkeley, CA 94704
510 549-1906 ext 236
http://www.tippingmar.com

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!