We are receiving a lot of bank Phishing emails.

[Steen, Glenn]

Sounds like you're using MailWatch. MW will not let you do this,
true, but the solution isn't that much more complex... Unless you
really don't like the commandline:-).
Simply
sendmail alternat at addre.ss <
/path/to/MailScanner/quarantine/<date>/<message-id>/message
and you should be fine.

-- Glenn

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of John Crossan
> Sent: den 14 januari 2005 01:37
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: We are receiving a lot of bank Phishing emails.
> 
> 
> We are receiving a lot of bank Phishing emails.
> ClamAV recognizes them and they are quarantined.
> I would like to forward these to uce at fte.gov or a more appropriate
> government agency to track down these criminals.
> When I get email that has a script in it or a bad filename I can check
> Release and Alternate Recipient(s): and fill in an address 
> and it works.
> When I get a Phishing virus there is no release box to check 
> and when I
> check Alternate Recipient (s): and fill in an address and it 
> Does Not work.
> What is the best way to catch these criminals and can it be placed on
> "auto-pilot"?
> HTML.Phishing.Bank-1 is our top "virus" as detected by ClamAV.
> 
> Since using MailScanner the count is now 582 for
> the "HTML.Phishing.Bank-1"
> 
> Thanks in Advance
> John Crossan
> Systems Administrator
> Valley Presbyterian Hospital
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!