Phishing is not working

[Stephen Swaney]

I could be wrong but the way I read the problem, Kai might be expecting that
the phishing feature catches and quarantines the email.

It doesn't do that. It just disarms the IRL by making it obvious that
visible URL and the REAL URL do not match.

Syebe 

Stephen Swaney
Fort Systems Ltd.
stephen.swaney at fsl.com
www.fsl.com

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Julian Field
> Sent: Monday, July 18, 2005 1:23 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Phishing is not working
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Make sure Dangerous Content Scanning = yes
> 
> 
> Mike Kercher wrote:
> 
> >Add ClamAV to your mix.  It catches a LOT of phishing.
> >
> >Mike
> >
> >
> >-----Original Message-----
> >From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf
> >Of Kai Wang
> >Sent: Monday, July 18, 2005 11:50 AM
> >To: MAILSCANNER at JISCMAIL.AC.UK
> >Subject: Phishing is not working
> >
> >Hi,
> >
> >We are running MailScanner 4.43.8-1 and I turned the phishing feature on.
> My
> >phishing.safe.sites.conf file is the default.  we receive tens of
> thousands
> >messages daily and we've been running this version for a few days. We
> have
> >not seen any message caught by the feature. I received a phishing message
> >myself. I tried to attach it to the message such that I can explain my
> >situation better. However, Julian's JISCmail mailer does not like it.
> >Apparently, MailScanner is able to identify the phishing thing. I wonder
> if
> >there is anything wrong in my configuration?
> >
> >Find Phishing Fraud = yes
> >Also Find Numeric Phishing = yes
> >Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf
> >
> >Thanks
> >Kai Wang
> >University of Calgary
> >
> >------------------------ MailScanner list ------------------------ To
> >unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the Wiki (http://wiki.mailscanner.info/) and the
> >archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> >Support MailScanner development - buy the book off the website!
> >
> >------------------------ MailScanner list ------------------------
> >To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> >Support MailScanner development - buy the book off the website!
> >
> >
> 
> - --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
> 
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.0.1 (Build 2185)
> 
> iQA/AwUBQtvlZRH2WUcUFbZUEQKtAwCfSnaX+MuDroEWDzDBkygZi1H63PQAoKVg
> 52uTp6YerZeLAdKYkCwbbdYc
> =FeLd
> -----END PGP SIGNATURE-----
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!