Phishing fraud question

[David While]

I too haven't detected any phishing attempts getting past - they are tagged as spam and also detected as a virus by ClamAV (reported as HTML.phishing.bank-1)
 
When I next see one I will check to see what SpamAssassin traps are being triggered.
 
David While

	-----Original Message----- 
	From: MailScanner mailing list on behalf of Martin Hepworth 
	Sent: Thu 14/10/2004 09:55 
	To: MAILSCANNER at JISCMAIL.AC.UK 
	Cc: 
	Subject: Re: Phishing fraud question
	
	

	Julian
	
	FP's are bad - this is what moved us to MS from MailSweeper in the first
	place, too many FP's and a really s l  o  w   interface to query what
	was blocked and release the stuff. Ok so MailSweeper couldn't tag the
	email just block it...but same issue.
	
	Like I said a couple of days ago, I see very few phishing attempts
	getting through here and wonder why I seem to be trapping them and your
	setup isn't..
	
	I'll double check my arhive and try and get some actual numbers on this...
	
	--
	Martin Hepworth
	Snr Systems Administrator
	Solid State Logic
	Tel: +44 (0)1865 842300
	
	
	Julian Field wrote:
	> I want your opinion.
	>
	> When things like scripts and forms are detected in emails, they are just
	> quietly disarmed without any subject line tagging at all.
	>
	> Should I do the same with phishing fraud attempts? The warning in the
	> message will be put in right next to the offending link.
	>
	> It's just that phishing detection does detect quite a few false positives
	> due to the stupidity of a lot of newsletter authors who put "fake" links in
	> their material. I don't want people to become used to seeing "{Dangerous
	> Content?}" or whatever, and therefore ignoring it.
	>
	> I have tagged the subject line so far, and I think it is already starting
	> to cause problems. I am tending towards removing the subject tag.
	>
	> Any thoughts please?
	> --
	> Julian Field
	> www.MailScanner.info
	> MailScanner thanks transtec Computers for their support
	> Buy the MailScanner book at www.MailScanner.info/store
	>
	> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
	>
	> ------------------------ MailScanner list ------------------------
	> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
	> 'leave mailscanner' in the body of the email.
	> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
	> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
	
	**********************************************************************
	
	This email and any files transmitted with it are confidential and
	intended solely for the use of the individual or entity to whom they
	are addressed. If you have received this email in error please notify
	the system manager.
	
	This footnote confirms that this email message has been swept
	for the presence of computer viruses and is believed to be clean.
	
	**********************************************************************
	
	------------------------ MailScanner list ------------------------
	To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
	'leave mailscanner' in the body of the email.
	Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
	the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).