Phishing Detection

[Michael Baird]

On Thu, 2004-11-25 at 10:25 +0000, Martin Sapsed wrote:
> Michael Baird wrote:
> > Yes, I have 3 inbound MX's, receive 1000+ messages every 10 minutes
> > each, I have not noticed any phish detections on any of them, been
> > running for about 6 hours on 4.36.1. This is why I'm concerned something
> > isn't working right with my config. I have filetype checking disabled,
> > is this necessary for the phishing detection to work?
>
> Simple test is to send yourself a message like the phishers send where
> the URL in the text is different to the URL in the href=.
>
> There's something about my system which means that Julian's phishing
> code doesn't work either but we haven't been able to work out what yet.
>
> Cheers,
>
> Martin

Oh, it definitely doesn't work, I've received a few since I posted that
message. I've made sure all the source rpms were compiled and installed
properly. I think my next step will be to go to generic source package
and reinstall, since this is the first time I've used the
Redhat/Mandrake specific package (previously it failed under Mandrake).

Regards
MIKE

> --
> Martin Sapsed            "I've got 8 little fingers and only 2 thumbs,
> Microcomputer Support                      won't you leave me in peace
> Information Services                        while I get the job done?"
> University of Wales, Bangor             Chris Rea, "I'm working on it"
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
--
Michael Baird <mike at tc3net.com>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!