MS Outlook "outbind" phishing detection

[Andy Norris]

Hi Julian,

Thanks very much for looking into this. The following is the URL in question:

MailScanner has detected a possible fraud attempt from "outbind:" claiming to
be<outbind://357-000000005CEF6A851C11534490FF98239E50A7B4C4522600/www.great
circleflight.com> www.greatcircleflight.com

I will now apply the patch you sent and see how we get on.

Thank you again,

Andy Norris


At 02:37 am 2006-06-28, you wrote:
>It already removed outbind://<digits>/.....
>
>Please can you give me an exact example of the URL that is the
>problem, preferably a real example.
>
>On 28 Jun 2006, at 00:04, Andy Norris wrote:
>
>>
>>Hi,
>>
>>I tried my hardest to find the answer on my own...
>>
>>I have a customer who sent me a message a bit ago unhappy that
>>their outbound mail to a customer of theirs had the warning
>>phishing message at the bottom of their email because Outlook put
>>in "outbind://....".
>>
>>What to do? Is there a way to tweak the phishing rules to allow any
>>url that starts with "outbind://"?
>>
>>Running MailScanner v 4.54.6-1 and SendMail v 8.12.11.
>>
>>Thanks in advance for any help,
>>
>>Andy Norris
>>
>>--
>>MailScanner mailing list
>>mailscanner at lists.mailscanner.info
>>http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>Before posting, read http://wiki.mailscanner.info/posting
>>
>>Support MailScanner development - buy the book off the website!
>
>--
>Julian Field
>MailScanner at ecs.soton.ac.uk
>
>
>
>--
>This message has been scanned for viruses and
>dangerous content by MailScanner, and is
>believed to be clean.
>MailScanner thanks transtec Computers for their support.
>
>--
>MailScanner mailing list
>mailscanner at lists.mailscanner.info
>http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>Before posting, read http://wiki.mailscanner.info/posting
>
>Support MailScanner development - buy the book off the website!