Anti-spear-phishing sa-update channel
MailScanner at ecs.soton.ac.uk
Sun Feb 1 19:26:01 GMT 2009
On 30/1/09 16:32, Scott Silva wrote:
> on 1-30-2009 12:52 AM shuttlebox spake the following:
>> On Sun, Jan 11, 2009 at 10:41 PM, Matt<spamlists at coders.co.uk> wrote:
>>> If anyone is interested I have published an sa-update channel which
>>> generates the same rules as Jules' script.
>>> The channel is
>> I started using it at a client site a week ago and have received four
>> (4) hits so far. :-)
>> What kind of results do others see?
> I haven't seen any hits and I added this when it came out weeks ago. I am
> probably killing all the junk it might have caught with blacklists at the MTA.
The biggest recipients of spear-phishing attacks appear to be academic
institutions. So if you aren't one of those, it's quite possible you
won't see any hits. I see a lot here.
Julian Field MEng CITP CEng
Buy the MailScanner book at www.MailScanner.info/store
MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the MailScanner