Phishing is not working

Michael Baird mike at TC3NET.COM
Mon Jul 18 19:16:25 IST 2005


On Mon, 2005-07-18 at 18:46 +0100, Julian Field wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> That's interesting, I have never heard of this before. Do you have 
> Dangerous Content Scanning = yes? Have you tried manually feeding it a 
> message with an obvious phish in it?

Yes I did turn it on, and Yes I have manually sent phishing type emails
through it, I tried quite a bit, I have 4 inbound mx's w/MailScanner and
I've never had any phishing attempts caught via MailScanner, however
ClamAV does offer some protection against the phishing attempts.

Regards
Michael Baird

> 
> Michael Baird wrote:
> 
> >Same here, I've never been able to get the phishing detection in
> >mailscanner to work, luckily my virus scanners do pick up many of the
> >attacks. If you figure out, be kind enough to post the fix. 
> >
> >Regards
> >Michael Baird
> >
> >  
> >
> >>Hi,
> >>
> >>We are running MailScanner 4.43.8-1 and I turned the phishing feature 
> >>on. My phishing.safe.sites.conf file is the default.  we receive tens of 
> >>thousands messages daily and we've been running this version for a few 
> >>days. We have not seen any message caught by the feature. I received a 
> >>phishing message myself. I tried to attach it to the message such that I 
> >>can explain my situation better. However, Julian's JISCmail mailer does 
> >>not like it. Apparently, MailScanner is able to identify the phishing 
> >>thing. I wonder if there is anything wrong in my configuration?
> >>
> >>Find Phishing Fraud = yes
> >>Also Find Numeric Phishing = yes
> >>Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf
> >>
> >>Thanks
> >>Kai Wang
> >>University of Calgary
> >>
> >>------------------------ MailScanner list ------------------------
> >>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >>'leave mailscanner' in the body of the email.
> >>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> >>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>
> >>Support MailScanner development - buy the book off the website!
> >>    
> >>
> >
> >------------------------ MailScanner list ------------------------
> >To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> >Support MailScanner development - buy the book off the website!
> >  
> >
> 
> - -- 
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
> 
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.0.1 (Build 2185)
> 
> iQA/AwUBQtvq5RH2WUcUFbZUEQLimQCff8gbHBloPIFXF67M7mzAAvnnnBwAoNF0
> NyrnKaJXHD6fJ2p6Teyix1sS
> =8aJb
> -----END PGP SIGNATURE-----
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list