Subject Text Not Getting Modified?

Julian Field MailScanner at ecs.soton.ac.uk
Wed Aug 1 11:19:57 IST 2007


The version in the quarantine won't be modified. It intentionally 
quarantines it in exactly the form it arrived.

Johnny Stork wrote:
> I have noticed that none of the detected spam, including high scoring 
> spam which gets quarantined, are  getting the subject lines modified? 
> I have almost all the Modify Subject settings enable in 
> mailscanner.conf, but nothing seems to be getting re-written. For 
> instance, below is the phishing section of mailscanner.conf, followed 
> by an incoming message. When I checked the message in mailwatch, the 
> subject is the same/unchanged?
>
> Any ideas?
>
> *Phishing Section of mailscanner.conf:*
>
> Phishing Modify Subject = yes
> # This is the text to add to the start of the subject if the "Phishing
> # Modify Subhect" option is set.
> # This can also be the filename of a ruleset.
> Phishing Subject Text = {Phishing Fraud}
>
>
> *Maillog of incoming message that triggered phishing fraud:*
>
> Jul 31 18:43:18 gateway MailScanner[11052]: Virus and Content 
> Scanning: Starting
> Jul 31 18:43:18 gateway MailScanner[11052]: <A> tag found in message 
> l711h3YO017623 from me at here.ca
> Jul 31 18:43:18 gateway MailScanner[11052]: Virus Scanning completed 
> at 95858 bytes per second
> Jul 31 18:43:18 gateway MailScanner[11052]: Found phishing fraud from 
> www.w3.org claiming to be www."http: in l711h3YO017623
> Jul 31 18:43:18 gateway MailScanner[11052]: Content Checks: Detected 
> and have disarmed phishing tags in HTML message in l711h3YO017623 from 
> me at here.ca
>
>
>
>
> -- 
> *Johnny Stork*
> Business & Technology Consultant
> stork at openenterprise.ca
>
>
> -- 
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean. Check out *Open Enterprise
> Solutions <http://www.openenterprise.ca>* for your own powerful 
> open-source 
> Virus/Spam/Content detection solutions and mail gateway. 

Jules

-- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk



More information about the MailScanner mailing list