possible fraud attempt and phising on my mail logs

[Stephen Swaney]

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of spart cus
> Sent: Wednesday, February 08, 2006 7:31 AM
> To: MailScanner discussion
> Subject: Re: possible fraud attempt and phising on my mail logs
> 
> 
> 
> --- Dhawal Doshy <dhawal at netmagicsolutions.com> wrote:
> 
> > spart cus wrote:
> > > */Dhawal Doshy <dhawal at netmagicsolutions.com>/*
> > wrote:
> > >     spart cus wrote:
> > >      > hi guys,
> > >      > found this logs on my mail server about
> > possible fraud attempt
> > >     and phising.
> > >      > is this normal ?
> > >      >
> > >      > Found ip-based phishing fraud from 10.2.0.0
> > >      > Found ip-based phishing fraud from
> > 255.255.255.255
> > >      > Found ip-based phishing fraud from 10.1.0.0
> > >      > Found ip-based phishing fraud from
> > 255.255.255.255
> > >      >
> > >      > . *MailScanner has detected a possible
> > fraud attempt from
> > >     "ee.ee.ee.ee"
> > >      > claiming to be* *MailScanner warning:
> > numerical links are often
> > >      > malicious: ee.ee.ee.ee*
> > >
> > >     [SNIP]
> > >
> > >     This is quite normal. It can be controlled
> > using the "Also Find Numeric
> > >     Phishing" parameter in MailScanner.conf
> > >
> > >     - dhawal
> > >
> > > can i disable this one? or its better the way it
> > is. coz i checked at
> > > the mail and it contains lots of links and some
> > router configurations
> > > wherein ip addresses are present.
> >
> > Most options in MailScanner.conf can be set to
> > 'yes', 'no' or a ruleset.
> >
> > To completely disable, use:
> > Also Find Numeric Phishing = no
> >
> > To use a ruleset, use:
> > Also Find Numeric Phishing =
> > %rules-dir%/find.numeric.phishing.rules
> >
> > i recommend that you read the wiki
> > (wiki.mailscanner.info) OR better,
> > buy the mailscanner book.
> >
> > - dhawal
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> >
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read
> > http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off
> > the website!
> >
> tnx for all the help.i do want to buy the book but
> dont have the money. is there any available pdf's for
> that ? it would be a great help here in our community
> for that. Godbless.

There is a free PDF download of the Basic MailScanner manual available at
our site:

	http://www.fsl.com/support.html 

And click on MailScanner Manual. It's almost 100 pages and only up to date
for version MailScanner version 4.45 but will cover all the basics.

Hope this helps,

Steve

Stephen Swaney
Fort Systems Ltd.
stephen.swaney at fsl.com
www.fsl.com