Anti fraud FPs

Julian Field MailScanner at ecs.soton.ac.uk
Thu Aug 18 09:25:15 IST 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Well your posting to the list reached me perfectly intact, so that  
would imply that more recent versions do not suffer this problem. The  
phishing net is a constantly changing beast (if a net can be a beast :-)

On 18 Aug 2005, at 00:39, João Gouveia wrote:

> Hi all,
>
> We're getting some FPs with the standard "claiming to be" anti  
> fraud message.
> This happens because people send (ham) HTML email messages that
> contain HREFs with content that's beeing wrongly interpreted as a URI.
> Some examples of messages triggering the anti fraud warning
>
> * [a href="http://www.google.com"]This triggers. Info it's beeing
> interpreted as a TL.D.[/a]
>
> * Check this article about [a href="http://www.google.com"]standard
> features of Microsoft .NET[/a]
>
> Is this the standard behaviour for recent versions of MailScanner?
> We're using 4.41.
> Although right now we have only a few complains, I'm thinking about
> turning of this anti-fraud mechanism because I feal it's prone to
> cause too many FPs.
> What does your experience say?
>
> Thanks.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

- -- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.2 (Build 2425)

iQA/AwUBQwRF7BH2WUcUFbZUEQJ+fQCfUdk6d1S6rwxzlV1LpZgRen7iWZAAoL/T
jfGQG+4rrEKTCCsMjCEVZcEU
=p7pF
-----END PGP SIGNATURE-----

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list