Phishing is not working
Michael Baird
mike at TC3NET.COM
Mon Jul 18 19:16:25 IST 2005
On Mon, 2005-07-18 at 18:46 +0100, Julian Field wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> That's interesting, I have never heard of this before. Do you have
> Dangerous Content Scanning = yes? Have you tried manually feeding it a
> message with an obvious phish in it?
Yes I did turn it on, and Yes I have manually sent phishing type emails
through it, I tried quite a bit, I have 4 inbound mx's w/MailScanner and
I've never had any phishing attempts caught via MailScanner, however
ClamAV does offer some protection against the phishing attempts.
Regards
Michael Baird
>
> Michael Baird wrote:
>
> >Same here, I've never been able to get the phishing detection in
> >mailscanner to work, luckily my virus scanners do pick up many of the
> >attacks. If you figure out, be kind enough to post the fix.
> >
> >Regards
> >Michael Baird
> >
> >
> >
> >>Hi,
> >>
> >>We are running MailScanner 4.43.8-1 and I turned the phishing feature
> >>on. My phishing.safe.sites.conf file is the default. we receive tens of
> >>thousands messages daily and we've been running this version for a few
> >>days. We have not seen any message caught by the feature. I received a
> >>phishing message myself. I tried to attach it to the message such that I
> >>can explain my situation better. However, Julian's JISCmail mailer does
> >>not like it. Apparently, MailScanner is able to identify the phishing
> >>thing. I wonder if there is anything wrong in my configuration?
> >>
> >>Find Phishing Fraud = yes
> >>Also Find Numeric Phishing = yes
> >>Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf
> >>
> >>Thanks
> >>Kai Wang
> >>University of Calgary
> >>
> >>------------------------ MailScanner list ------------------------
> >>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >>'leave mailscanner' in the body of the email.
> >>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> >>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>
> >>Support MailScanner development - buy the book off the website!
> >>
> >>
> >
> >------------------------ MailScanner list ------------------------
> >To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> >Support MailScanner development - buy the book off the website!
> >
> >
>
> - --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.0.1 (Build 2185)
>
> iQA/AwUBQtvq5RH2WUcUFbZUEQLimQCff8gbHBloPIFXF67M7mzAAvnnnBwAoNF0
> NyrnKaJXHD6fJ2p6Teyix1sS
> =8aJb
> -----END PGP SIGNATURE-----
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list