Why is this domain spoofing.

Glenn Steen glenn.steen at gmail.com
Thu Nov 12 13:14:47 GMT 2009


2009/11/9 Robert Lopez <rlopezcnm at gmail.com>:
(snip)
> I had the office of PTK that sent out the news letter send it to me at
> my Gmail address. The news letter has a lot of URL for addresses not
> at ptk.org. Perhaps that may be a part of the problem.  They then sent
> to my cnm.edu address the news letter as inline rather than as an
> attachment. That was delivered to me via one of the same email
> gateways that blocked all the previous email. That seems to mean the
> content checking for inline email is different from the content
> checking for attachments.
>
No, it just means you likely have
http://www.mailscanner.info/MailScanner.conf.index.html#ClamAV%20Full%20Message%20Scan
set to "no".

The behavior you see is normal, and possible to handle. Best would be
if teh sender cleaned up their HTML, exactly as Alex has been saying.

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se


More information about the MailScanner mailing list