Feature Request: Phishing

[John Wilcock]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Julian Field wrote:
> John Wilcock wrote:
>> I can't see a need for regexes. Simple wildcards (*.domain.com) would be
>> more convenient but by no means essential, at least judging by the
>> sample of phishing mail we get here.
>
> Wildcards would be no better than allowing full regexps. It would need
> to be full hostnames of the website concerned. Is that okay?

I'll vote for that, yes.

>
>> Or how about a wacky idea - an option to look the hostname up in a
>> DNS-based whitelist, SURBL-style. For particularly large whitelists I
>> expect the performance from a local rbldnsd server ought to be good
>> enough.
>
>
> Eek! Sounds like a good idea, but I think very very few people would
> actually use it.

Probably true, unless of course someone with good connectivity were to
set up a *publicly-available* DNS-based phishing URL whitelist that we
could all contribute to.

John.

--
-- Over 2500 webcams from ski resorts around the world - www.snoweye.com
-- Translate your technical documents and web pages    - www.tradoc.fr

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!