upgraded to latest version, now getting "possible fraud attempt" on legit email

Julian Field mailscanner at ecs.soton.ac.uk
Tue Nov 30 18:36:46 GMT 2004


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

You can either turn off the Phishing Fraud detector completely, or else
see my last post in the thread "Re: Phishing version and mailto: tag"
which has a replacement Message.pm file attached, which you should drop
into /usr/lib/MailScanner/MailScanner/Message.pm and then stop and
restart MailScanner.

The phishing net has been under fairly rapid development recently, and
has greatly improved.

Fractal IT Dept. wrote:

> Hi everyone,
>
> We upgraded MailScanner over the weekend, and are now having
> legitimate email being marked with "MailScanner has detected a
> possible fraud attempt from *MailScanner has detected a possible fraud
> attempt from "user at domain_x.com" claiming to be * *MailScanner has
> detected a possible fraud attempt from "user at domain_x.com" claiming to
> be "user at domain_x.com"** claiming to be MailScanner has detected a
> possible fraud attempt from **MailScanner has detected a possible
> fraud attempt from "user at domain_x.com" claiming to be * *MailScanner
> has detected a possible fraud attempt from "user at domain_x.com"
> claiming to be "user at domain_x.com"** claiming to be @domain_x.com".
> How do I fix?*


--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list