MailScanner being a little TOO fussy about case?

[Michael H. Warfield]

On Mon, 2006-01-30 at 20:47 +0000, Julian Field wrote:
> It is case insensitive. I just tested it. And I just checked the code. 
> It really is case insensitive, I've even doubled it up in 1 place just 
> to be sure.

> So I'm sorry, but I don't understand how you got your results.
> :-(

	Oh, hells bells...  I guess it wasn't case after all.  It looks like
it's some sort of html inanity.  Here's the text:

<font color="#0000FF"><u><a href="http://www.rglegal.com/"
eudora="autourl"><font color="red"><b>MailScanner has detected a
possible fraud attempt from "www.rglegal.com" claiming to be</b></font>
www.RGLegal.</a><a href="http://www.rglegal.com/"
eudora="autourl">com</a></u></font>

	What a bunch of garbage.  Splitting an href around PART of the FQDN and
all.  Gag...

	The site is owned by a couple of friends of mine.  I'll bring this to
their attention.

	Mike

> Wess Bechard wrote:
> > I have had this same problem too, and actually disabled phishing 
> > detection when I noticed it.
> >
> > Version 4.50-12 here.
> >
> >
> >
> > On Mon, 2006-01-30 at 15:12 -0500, Michael H. Warfield wrote:
> >> Hmmm...
> >>
> >> 	Just noticed this in an E-Mail message:
> >>
> >> MailScanner has detected a possible fraud attempt from "www.rglegal.com"
> >> claiming to bewww.RGLegal.com
> >>
> >> 	Ok...  Other than needing a space after the "be" to be clearer, it's
> >> fussing that the case doesn't match in an FQDN?  That's a bit much.  It
> >> shouldn't be case sensitive there, should it?  While there MIGHT be a
> >> problem with the paths in some URL's being case sensitive, a domain name
> >> is case insensitive.  In fact, I quite often mix case on my own domain
> >> name - wittsend.com == WittsEnd.com == WittsEnd.Com - depending on
> >> context.
> >>     
> 
> -- 
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
> 
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> 
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
-- 
Michael H. Warfield (AI4NB) | (770) 985-6132 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0xDF1DD471        | possible worlds.  A pessimist is sure of it!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 307 bytes
Desc: This is a digitally signed message part
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060130/f4abea90/attachment.bin