minor logging problem
Mark Nienberg
lists at tippingmar.com
Wed Sep 9 00:34:05 IST 2009
I think there is a little logging problem related to phishing fraud in
v 4.76.25. I think the logger is misinterpreting a character in the URI
as a newline or something. I wish I had the original message to show,
but maybe it is obvious from the following entries:
Sep 8 13:06:57 tesla MailScanner[6401]: Found phishing fraud from
http://70.85.141.146/banmanpro/ad.aspx?Task=Click&ZoneID=0&CampaignID=
Sep 8 13:06:57 tesla MailScanner[6401]:
4995&AdvertiserID=432&BannerID=2629&SiteID=1&RandomNumber=1091273949&Keyword
Sep 8 13:06:57 tesla MailScanner[6401]: s= claiming to be in
n88K6TsG006372
Sep 8 13:06:57 tesla MailScanner[6401]: Found phishing fraud from
http://70.85.141.146/banmanpro/ad.aspx?Task=Click&ZoneID=0&CampaignID=
Sep 8 13:06:57 tesla MailScanner[6401]:
4996&AdvertiserID=202&BannerID=2596&SiteID=1&RandomNumber=1452882870&Keyword
Sep 8 13:06:57 tesla MailScanner[6401]: s= claiming to be in
n88K6TsG006372
Sep 8 13:06:57 tesla MailScanner[6401]: Found phishing fraud from
http://through-the-interface.typepad.com/through_the_interface/2009/09/creating-and-overriding-autocad-dimension-styles-using-net.html
claiming to be www.creatingandoverridingautocaddimensionstylesusing.net
in n88K6TsG006372
Sep 8 13:06:57 tesla MailScanner[5222]: Content Checks: Detected and
have disarmed phishing tags in HTML message in n88K6TsG006372 from
bounce-tenlinksdaily2-62307 at list.tenlinks.com
Mark Nienberg
More information about the MailScanner
mailing list