Testing Message.pm.041121

Julian Field mailscanner at ecs.soton.ac.uk
Sun Nov 28 11:41:38 GMT 2004


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

I've fixed that one now.
Patch for Message.pm.041121 is this:

4060c4060
<         unless $squashedtext =~ /^w+|ft+p|fpt+|mailto/;
---
 >         unless $squashedtext =~ /^ww+|ft+p|fpt+|mailto/;

Quentin Campbell wrote:

>Julian
>
>With the latest Message.pm the HTML tag
>
><a
>href=3D"http://www.worldonaplate.com/session.html">worldonaplate.com</a>
>
>is caught thus:
>
>The Newcastle MailScanner has detected a possible 'phishing fraud'
>attempt because there is a difference between the actual link
>"www.worldonaplate.com" and what it claims to be worldonaplate.com
>
>The HTML tag
>
><a
>href=3D"http://worldonaplate.com/session.html">www.worldonaplate.com</a>
>
>is not flagged.
>
>As I understood your comments that accompanied the latest Message.pm,
>the first tag should also have been passed unflagged. The example to
>which you responded and said you had fixed was of the first type of tag.
>
>
>
--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list