We are receiving a lot of bank Phishing emails.

[Steve Swaney]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Steen, Glenn
> Sent: Friday, January 14, 2005 4:19 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: We are receiving a lot of bank Phishing emails.
>
> Sounds like you're using MailWatch. MW will not let you do this,
> true, but the solution isn't that much more complex... Unless you
> really don't like the commandline:-).
> Simply
> sendmail alternat at addre.ss <
> /path/to/MailScanner/quarantine/<date>/<message-id>/message
> and you should be fine.
>
> -- Glenn
>
I don't think this will work. I will just be caught again by ClamAV.

Possibly a rule for Virus Scanning = that looks at the To: address:

To:     user at somedoamin.com     no
ToOrFrom:       default yes

Where user at somedomain.co is the recipient of the virus :) Might be work.

Steve

Steve Swaney
President
Fortress Systems Ltd.
www.fsl.com
steve.swaney at fsl.com


--
This message has been scanned for viruses and dangerous content by The MailScanner at Fortress Systems Ltd., www.fsl.com, and is believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!