minor logging problem

Mark Nienberg lists at tippingmar.com
Wed Sep 9 00:34:05 IST 2009


I think there is a little logging problem related to phishing fraud in  
v 4.76.25.  I think the logger is misinterpreting a character in the URI 
as a newline or something.  I wish I had the original message to show, 
but maybe it is obvious from the following entries:

Sep  8 13:06:57 tesla MailScanner[6401]: Found phishing fraud from 
http://70.85.141.146/banmanpro/ad.aspx?Task=Click&ZoneID=0&CampaignID=

Sep  8 13:06:57 tesla MailScanner[6401]: 
4995&AdvertiserID=432&BannerID=2629&SiteID=1&RandomNumber=1091273949&Keyword

Sep  8 13:06:57 tesla MailScanner[6401]: s= claiming to be  in 
n88K6TsG006372

Sep  8 13:06:57 tesla MailScanner[6401]: Found phishing fraud from 
http://70.85.141.146/banmanpro/ad.aspx?Task=Click&ZoneID=0&CampaignID=

Sep  8 13:06:57 tesla MailScanner[6401]: 
4996&AdvertiserID=202&BannerID=2596&SiteID=1&RandomNumber=1452882870&Keyword

Sep  8 13:06:57 tesla MailScanner[6401]: s= claiming to be  in 
n88K6TsG006372

Sep  8 13:06:57 tesla MailScanner[6401]: Found phishing fraud from 
http://through-the-interface.typepad.com/through_the_interface/2009/09/creating-and-overriding-autocad-dimension-styles-using-net.html 
claiming to be www.creatingandoverridingautocaddimensionstylesusing.net 
in n88K6TsG006372

Sep  8 13:06:57 tesla MailScanner[5222]: Content Checks: Detected and 
have disarmed phishing tags in HTML message in n88K6TsG006372 from 
bounce-tenlinksdaily2-62307 at list.tenlinks.com


Mark Nienberg


More information about the MailScanner mailing list