minor logging problem

[Julian Field]

Sorry, cannot start trying to fix that one without the original message, 
or a message which produces the same symptoms.

Jules.

On 09/09/2009 00:34, Mark Nienberg wrote:
> I think there is a little logging problem related to phishing fraud 
> in  v 4.76.25.  I think the logger is misinterpreting a character in 
> the URI as a newline or something.  I wish I had the original message 
> to show, but maybe it is obvious from the following entries:
>
> Sep  8 13:06:57 tesla MailScanner[6401]: Found phishing fraud from 
> http://70.85.141.146/banmanpro/ad.aspx?Task=Click&ZoneID=0&CampaignID=
>
> Sep  8 13:06:57 tesla MailScanner[6401]: 
> 4995&AdvertiserID=432&BannerID=2629&SiteID=1&RandomNumber=1091273949&Keyword 
>
>
> Sep  8 13:06:57 tesla MailScanner[6401]: s= claiming to be  in 
> n88K6TsG006372
>
> Sep  8 13:06:57 tesla MailScanner[6401]: Found phishing fraud from 
> http://70.85.141.146/banmanpro/ad.aspx?Task=Click&ZoneID=0&CampaignID=
>
> Sep  8 13:06:57 tesla MailScanner[6401]: 
> 4996&AdvertiserID=202&BannerID=2596&SiteID=1&RandomNumber=1452882870&Keyword 
>
>
> Sep  8 13:06:57 tesla MailScanner[6401]: s= claiming to be  in 
> n88K6TsG006372
>
> Sep  8 13:06:57 tesla MailScanner[6401]: Found phishing fraud from 
> http://through-the-interface.typepad.com/through_the_interface/2009/09/creating-and-overriding-autocad-dimension-styles-using-net.html 
> claiming to be 
> www.creatingandoverridingautocaddimensionstylesusing.net in 
> n88K6TsG006372
>
> Sep  8 13:06:57 tesla MailScanner[5222]: Content Checks: Detected and 
> have disarmed phishing tags in HTML message in n88K6TsG006372 from 
> bounce-tenlinksdaily2-62307 at list.tenlinks.com
>
>
> Mark Nienberg

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
Follow me at twitter.com/JulesFM and twitter.com/MailScanner


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.