Phishing is not working

[Kai Wang]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

My "Dangerous Content Scanning" is yes. The phishing message is very 
obvious. You can see it in here:

http://homepages.ucalgary.ca/~kwang/phishing

Kai

Julian Field wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>That's interesting, I have never heard of this before. Do you have 
>Dangerous Content Scanning = yes? Have you tried manually feeding it a 
>message with an obvious phish in it?
>
>Michael Baird wrote:
>
>  
>
>>Same here, I've never been able to get the phishing detection in
>>mailscanner to work, luckily my virus scanners do pick up many of the
>>attacks. If you figure out, be kind enough to post the fix. 
>>
>>Regards
>>Michael Baird
>>
>> 
>>
>>    
>>
>>>Hi,
>>>
>>>We are running MailScanner 4.43.8-1 and I turned the phishing feature 
>>>on. My phishing.safe.sites.conf file is the default.  we receive tens of 
>>>thousands messages daily and we've been running this version for a few 
>>>days. We have not seen any message caught by the feature. I received a 
>>>phishing message myself. I tried to attach it to the message such that I 
>>>can explain my situation better. However, Julian's JISCmail mailer does 
>>>not like it. Apparently, MailScanner is able to identify the phishing 
>>>thing. I wonder if there is anything wrong in my configuration?
>>>
>>>Find Phishing Fraud = yes
>>>Also Find Numeric Phishing = yes
>>>Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf
>>>
>>>Thanks
>>>Kai Wang
>>>University of Calgary
>>>
>>>------------------------ MailScanner list ------------------------
>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>'leave mailscanner' in the body of the email.
>>>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>>Support MailScanner development - buy the book off the website!
>>>   
>>>
>>>      
>>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>> 
>>
>>    
>>
>
>- -- 
>Julian Field
>www.MailScanner.info
>Buy the MailScanner book at www.MailScanner.info/store
>Professional Support Services at www.MailScanner.biz
>MailScanner thanks transtec Computers for their support
>
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>
>-----BEGIN PGP SIGNATURE-----
>Version: PGP Desktop 9.0.1 (Build 2185)
>
>iQA/AwUBQtvq5RH2WUcUFbZUEQLimQCff8gbHBloPIFXF67M7mzAAvnnnBwAoNF0
>NyrnKaJXHD6fJ2p6Teyix1sS
>=8aJb
>-----END PGP SIGNATURE-----
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>  
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!