fraud warnings

Wed Aug 13 10:31:05 IST 2008

Thanks for all your help people. All sorted - it was a bad signature after
all. Cheers. This list is magic.

>
> User needs to sort his/her signature then - looks like the url is missing
> the h from http!
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info
>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
>> Of Mail Admin
>> Sent: 12 August 2008 17:15
>> To: MailScanner discussion
>> Subject: RE: fraud warnings
>>
>> hMailScanner has detected a possible fraud attempt from
>> "www.thorlo.com"
>> claiming to be ttp://www.thorlo.com
>>
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info
>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
>> Of Alex Neuman van der Hans
>> Sent: 12 August 2008 16:18
>> To: MailScanner discussion
>> Subject: Re: fraud warnings
>>
>> Right. What's the error in the html?
>>
>> On Aug 12, 2008, at 10:08 AM, Mail Admin wrote:
>>
>> > Basically the user person has an outlook signature that
>> basically is
>> > written as follows
>> >
>> > Regards Firstname Lastname
>> >
>> > http://www.domain1.com
>> > http://www.domain2.com
>> > http://www.domain3.com this one is failing...
>> >
>> >
>> > Thanks
>> >
>> >
>> > -----Original Message-----
>> > From: mailscanner-bounces at lists.mailscanner.info
>> > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of
>> > Julian Field
>> > Sent: 12 August 2008 14:27
>> > To: MailScanner discussion
>> > Subject: Re: fraud warnings
>> >
>> > You can add them to /etc/MailScanner/phishing.safe.sites.conf. The
>> > daily update will carefully keep any additions you have made to the
>> > file.
>> >
>> > You don't need to use a ruleset for this at all.
>> >
>> > But I would like to see the exact HTML they are using to
>> see what they
>> > are up to and why the phishing net is being triggered.
>> >
>> > Alex Neuman van der Hans wrote:
>> >> Use a ruleset to exclude them from phishing checks. And
>> perhaps help
>> >> them fix their html - that would be a nice gesture.
>> >>
>> >> On Aug 12, 2008, at 7:18 AM, Mail Admin wrote:
>> >>
>> >>> Hi all,
>> >>>
>> >>> When I receive a mail message from a client, I get the
>> MailScanner
>> >>> has detected a possible fraud attempt from
>> www.domain.com, claiming
>> >>> to be www.domain.com.
>> >>>
>> >>> The client is a brand distributor and distributes 3 different
>> >>> brands, as well as its own, so in their email their
>> signature as the
>> >>> 3 different website addresses but one, is coming through
>> MailScanner
>> >>> as Fraud.
>> >>>
>> >>> How do I deal with this situation in MailScanner : I
>> would like to
>> >>> allow this email domain to use this domain in their email
>> >>> signatures!
>> >>>
>> >>> I hope I am clear..
>> >>> Regards
>> >>>
>> >>> Kevin
>> >>> This e-mail is intended solely for the addressee(s) and
>> is strictly
>> >>> confidential. The unauthorised use, disclosure or copying of this
>> >>> e-mail, or any information it contains is prohibited. If you have
>> >>> received this e-mail in error, please notify us
>> immediately and then
>> >>> permanently delete it. Although we make every effort to keep our
>> >>> systems free from viruses, you should check this e-mail and any
>> >>> attachments to it for viruses as we cannot accept any
>> liability for
>> >>> viruses inadvertently transmitted by use.
>> >>>
>> >>> --
>> >>> MailScanner mailing list
>> >>> mailscanner at lists.mailscanner.info
>> >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> >>>
>> >>> Before posting, read http://wiki.mailscanner.info/posting
>> >>>
>> >>> Support MailScanner development - buy the book off the website!
>> >>
>> >
>> > Jules
>> >
>> > --
>> > Julian Field MEng CITP CEng
>> > www.MailScanner.info
>> > Buy the MailScanner book at www.MailScanner.info/store
>> >
>> > Need help customising MailScanner?
>> > Contact me!
>> > Need help fixing or optimising your systems?
>> > Contact me!
>> > Need help getting you started solving new requirements from
>> your boss?
>> > Contact me!
>> >
>> > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>> >
>> >
>> > --
>> > This message has been scanned for viruses and dangerous content by
>> > MailScanner, and is believed to be clean.
>> >
>> > --
>> > MailScanner mailing list
>> > mailscanner at lists.mailscanner.info
>> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> >
>> > Before posting, read http://wiki.mailscanner.info/posting
>> >
>> > Support MailScanner development - buy the book off the website!
>> >
>> > --
>> > This message has been scanned for viruses and dangerous content by
>> > MailScanner, and is believed to be clean.
>> >
>> >
>> > This e-mail is intended solely for the addressee(s) and is
>> strictly
>> > confidential. The unauthorised use, disclosure or copying
>> of this e-
>> > mail, or any information it contains is prohibited. If you have
>> > received this e-mail in error, please notify us immediately
>> and then
>> > permanently delete it. Although Midland Internet & Computer
>> > Solutions make every effort to keep our systems free from viruses
>> > you should check this e-mail and any attachments to it for viruses
>> > as we cannot accept any liability for viruses inadvertently
>> > transmitted by use.
>> >
>> > --
>> > MailScanner mailing list
>> > mailscanner at lists.mailscanner.info
>> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> >
>> > Before posting, read http://wiki.mailscanner.info/posting
>> >
>> > Support MailScanner development - buy the book off the website!
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>>
>>
>> This e-mail is intended solely for the addressee(s) and is
>> strictly confidential. The unauthorised use, disclosure or
>> copying of this e-mail, or any information it contains is
>> prohibited. If you have received this e-mail in error, please
>> notify us immediately and then permanently delete it.
>> Although Midland Internet & Computer Solutions make every
>> effort to keep our systems free from viruses you should check
>> this e-mail and any attachments to it for viruses as we
>> cannot accept any liability for viruses inadvertently
>> transmitted by use.
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>
>
>
>
> **********************************************************************
> Confidentiality : This e-mail and any attachments are intended for the
> addressee only and may be confidential. If they come to you in error
> you must take no action based on them, nor must you copy or show them
> to anyone. Please advise the sender by replying to this e-mail
> immediately and then delete the original from your computer.
> Opinion : Any opinions expressed in this e-mail are entirely those of
> the author and unless specifically stated to the contrary, are not
> necessarily those of the author's employer.
> Security Warning : Internet e-mail is not necessarily a secure
> communications medium and can be subject to data corruption. We advise
> that you consider this fact when e-mailing us.
> Viruses : We have taken steps to ensure that this e-mail and any
> attachments are free from known viruses but in keeping with good
> computing practice, you should ensure that they are virus free.
>
> Red Lion 49 Ltd T/A Solid State Logic
> Registered as a limited company in England and Wales
> (Company No:5362730)
> Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU,
> United Kingdom
> **********************************************************************
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>

This e-mail is intended solely for the addressee(s) and is strictly confidential. The unauthorised use, disclosure or copying of this e-mail, or any information it contains is prohibited. If you have received this e-mail in error, please notify us immediately and then permanently delete it. Although Midland Internet & Computer Solutions make every effort to keep our systems free from viruses you should check this e-mail and any attachments to it for viruses as we cannot accept any liability for viruses inadvertently transmitted by use.