phishing detection not working?

[Tony Enderby]

Hi there,

This is interesting, I have been using MailScanner for about a year and
have installed all major releases and betas and phishing detection has
never worked until I installed Beta 4.50.9 at which stage it magically
started working!

So I'm not sure if it was a repackaged module in the distribution or
whether I had installed something else during a version change window
which the phishing code needed.

My OS is FC3.



On 1/24/2006, "Patel, Anjana" <Anjana.Patel at Cranfield.ac.uk> wrote:

>
>Hello,
>
>I'm having problems getting the phishing detection to work.  I've
>noticed from the mailing list archives that a couple of other people
>also had the same problem but I didn't see a resolution.
>
>I've upgraded Mailscanner to the latest stable (4.49.7) but after
>several tests it appears that the phishing detection is still not
>working.  It had also failed to work in version 4.47.4.
>
>The maillog shows that the phishing whitelist is being read:
>
> "Read 701 hostnames from the phishing whitelist"
>
>Here are the relevant paramaters:
>
>Dangerous Content Scanning = yes
>Find Phishing Fraud = yes
>Also Find Numeric Phishing = yes
>Highlight Phishing Fraud = yes
>Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf
>Phishing Modify Subject = yes
>Phishing Subject Text = {FRAUD?}
>
>
>./MailScanner --version
>Running on
>Linux mailgate-1 2.6.9-11.ELsmp #1 SMP Fri May 20 18:26:27 EDT 2005 i686
>i686 i386 GNU/Linux
>This is Red Hat Enterprise Linux AS release 4 (Nahant Update 2)
>This is Perl version 5.008005 (5.8.5)
>
>This is MailScanner version 4.49.7
>Module versions are:
>1.00    AnyDBM_File
>1.16    Archive::Zip
>1.03    Carp
>1.119   Convert::BinHex
>1.00    DirHandle
>1.05    Fcntl
>2.73    File::Basename
>2.08    File::Copy
>2.01    FileHandle
>1.06    File::Path
>0.16    File::Temp
>1.32    HTML::Entities
>3.48    HTML::Parser
>2.35    HTML::TokeParser
>1.21    IO
>1.10    IO::File
>1.123   IO::Pipe
>1.71    Mail::Header
>3.07    MIME::Base64
>5.419   MIME::Decoder
>5.419   MIME::Decoder::UU
>5.419   MIME::Head
>5.419   MIME::Parser
>3.07    MIME::QuotedPrint
>5.419   MIME::Tools
>0.11    Net::CIDR
>1.08    POSIX
>1.77    Socket
>0.08    Sys::Syslog
>1.02    Time::localtime
>
>Optional module versions are:
>0.17    Convert::TNEF
>1.809   DB_File
>1.08    Digest
>1.01    Digest::HMAC
>2.33    Digest::MD5
>2.07    Digest::SHA1
>0.44    Inline
>0.17    Mail::ClamAV
>3.001000        Mail::SpamAssassin
>missing Mail::SPF::Query
>missing Net::CIDR::Lite
>0.55    Net::DNS
>0.31    Net::LDAP
>1.94    Parse::RecDescent
>missing SAVI
>missing Sys::Hostname::Long
>2.42    Test::Harness
>0.47    Test::Simple
>1.95    Text::Balanced
>1.30    URI
>
>
>I don't think the settings for these are relevant but I have included
>them as extra information
>
>Allow IFrame Tags = yes
>Allow Form Tags = yes
>Allow Script Tags = yes
>Allow WebBugs = yes
>Allow Object Codebase Tags = yes
>Convert Dangerous HTML To Text = no
>
>
>Any advice would be appreciated.
>
>Thanks
>Anjana
>
>--
>MailScanner mailing list
>MailScanner at lists.mailscanner.info
>http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>Before posting, read http://wiki.mailscanner.info/posting
>
>Support MailScanner development - buy the book off the website!
>
>-----------------------------------------------------------------------------------
>Scanned by MailWash Australia - http://www.mailwash.com.au
>-----------------------------------------------------------------------------------
>

-----------------------------------------------------------------------------------
Scanned by MailWash Australia - http://www.mailwash.com.au
-----------------------------------------------------------------------------------