MS Outlook "outbind" phishing detection

[Julian Field]

On 28 Jun 2006, at 07:03, Andy Norris wrote:

>
> Thanks very much for the tip, Thomas.
>
> I do want to keep highlighting them... but maybe in the phishing  
> rules file I can do this:
>
> *.mydomain.com
>
> And it will just skip this domain from marking as phishing when it  
> comes up like this:

From: *.mydomain.com no
FromOrTo: default yes


>
> outbind://929342984398279009/mydomain.com
>
> Would that work okay?

It should ignore these anyway.

>
> Thanks again!
>
> andy
>
>
> At 10:05 pm 2006-06-27, Thomas Chamtieh wrote:
>> Hi Andy,
>>
>> You can just turn out the highlighting of Phishing Fraud in
>> MailScanner.conf
>>
>> Highlight Phishing Fraud = no
>>
>> -Thomas
>>
>>
>> > -----Original Message-----
>> > From: mailscanner-bounces at lists.mailscanner.info
>> > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
>> > Of Andy Norris
>> > Sent: Tuesday, June 27, 2006 4:04 PM
>> > To: mailscanner at lists.mailscanner.info
>> > Subject: MS Outlook "outbind" phishing detection
>> >
>> >
>> > Hi,
>> >
>> > I tried my hardest to find the answer on my own...
>> >
>> > I have a customer who sent me a message a bit ago unhappy
>> > that their outbound mail to a customer of theirs had the
>> > warning phishing message at the bottom of their email because
>> > Outlook put in "outbind://....".
>> >
>> > What to do? Is there a way to tweak the phishing rules to
>> > allow any url that starts with "outbind://"?
>> >
>> > Running MailScanner v 4.54.6-1 and SendMail v 8.12.11.
>> >
>> > Thanks in advance for any help,
>> >
>> > Andy Norris
>> >
>> > --
>> > MailScanner mailing list
>> > mailscanner at lists.mailscanner.info
>> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> >
>> > Before posting, read http://wiki.mailscanner.info/posting
>> >
>> > Support MailScanner development - buy the book off the website!
>> >
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!

-- 
Julian Field
MailScanner at ecs.soton.ac.uk



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.