fraud warnings

[Martin.Hepworth]

User needs to sort his/her signature then - looks like the url is missing the h from http!

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> Of Mail Admin
> Sent: 12 August 2008 17:15
> To: MailScanner discussion
> Subject: RE: fraud warnings
>
> hMailScanner has detected a possible fraud attempt from
> "www.thorlo.com"
> claiming to be ttp://www.thorlo.com
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> Of Alex Neuman van der Hans
> Sent: 12 August 2008 16:18
> To: MailScanner discussion
> Subject: Re: fraud warnings
>
> Right. What's the error in the html?
>
> On Aug 12, 2008, at 10:08 AM, Mail Admin wrote:
>
> > Basically the user person has an outlook signature that
> basically is
> > written as follows
> >
> > Regards Firstname Lastname
> >
> > http://www.domain1.com
> > http://www.domain2.com
> > http://www.domain3.com this one is failing...
> >
> >
> > Thanks
> >
> >
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
> > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of
> > Julian Field
> > Sent: 12 August 2008 14:27
> > To: MailScanner discussion
> > Subject: Re: fraud warnings
> >
> > You can add them to /etc/MailScanner/phishing.safe.sites.conf. The
> > daily update will carefully keep any additions you have made to the
> > file.
> >
> > You don't need to use a ruleset for this at all.
> >
> > But I would like to see the exact HTML they are using to
> see what they
> > are up to and why the phishing net is being triggered.
> >
> > Alex Neuman van der Hans wrote:
> >> Use a ruleset to exclude them from phishing checks. And
> perhaps help
> >> them fix their html - that would be a nice gesture.
> >>
> >> On Aug 12, 2008, at 7:18 AM, Mail Admin wrote:
> >>
> >>> Hi all,
> >>>
> >>> When I receive a mail message from a client, I get the
> MailScanner
> >>> has detected a possible fraud attempt from
> www.domain.com, claiming
> >>> to be www.domain.com.
> >>>
> >>> The client is a brand distributor and distributes 3 different
> >>> brands, as well as its own, so in their email their
> signature as the
> >>> 3 different website addresses but one, is coming through
> MailScanner
> >>> as Fraud.
> >>>
> >>> How do I deal with this situation in MailScanner : I
> would like to
> >>> allow this email domain to use this domain in their email
> >>> signatures!
> >>>
> >>> I hope I am clear..
> >>> Regards
> >>>
> >>> Kevin
> >>> This e-mail is intended solely for the addressee(s) and
> is strictly
> >>> confidential. The unauthorised use, disclosure or copying of this
> >>> e-mail, or any information it contains is prohibited. If you have
> >>> received this e-mail in error, please notify us
> immediately and then
> >>> permanently delete it. Although we make every effort to keep our
> >>> systems free from viruses, you should check this e-mail and any
> >>> attachments to it for viruses as we cannot accept any
> liability for
> >>> viruses inadvertently transmitted by use.
> >>>
> >>> --
> >>> MailScanner mailing list
> >>> mailscanner at lists.mailscanner.info
> >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>>
> >>> Before posting, read http://wiki.mailscanner.info/posting
> >>>
> >>> Support MailScanner development - buy the book off the website!
> >>
> >
> > Jules
> >
> > --
> > Julian Field MEng CITP CEng
> > www.MailScanner.info
> > Buy the MailScanner book at www.MailScanner.info/store
> >
> > Need help customising MailScanner?
> > Contact me!
> > Need help fixing or optimising your systems?
> > Contact me!
> > Need help getting you started solving new requirements from
> your boss?
> > Contact me!
> >
> > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >
> >
> > --
> > This message has been scanned for viruses and dangerous content by
> > MailScanner, and is believed to be clean.
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> > --
> > This message has been scanned for viruses and dangerous content by
> > MailScanner, and is believed to be clean.
> >
> >
> > This e-mail is intended solely for the addressee(s) and is
> strictly
> > confidential. The unauthorised use, disclosure or copying
> of this e-
> > mail, or any information it contains is prohibited. If you have
> > received this e-mail in error, please notify us immediately
> and then
> > permanently delete it. Although Midland Internet & Computer
> > Solutions make every effort to keep our systems free from viruses
> > you should check this e-mail and any attachments to it for viruses
> > as we cannot accept any liability for viruses inadvertently
> > transmitted by use.
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
> This e-mail is intended solely for the addressee(s) and is
> strictly confidential. The unauthorised use, disclosure or
> copying of this e-mail, or any information it contains is
> prohibited. If you have received this e-mail in error, please
> notify us immediately and then permanently delete it.
> Although Midland Internet & Computer Solutions make every
> effort to keep our systems free from viruses you should check
> this e-mail and any attachments to it for viruses as we
> cannot accept any liability for viruses inadvertently
> transmitted by use.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>




**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.
Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.
Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 
Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************