does MailScanner rewrite URL

Jeff Mills Jeff.Mills at sydneytech.com.au
Thu May 27 03:11:45 IST 2010



-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Robert Lopez
Sent: Thursday, 27 May 2010 11:46 AM
To: MailScanner discussion
Subject: does MailScanner rewrite URL

If MailScanner is generating it why?, how is it interpreted?, how to
stop it?  Is that port 6777 Beagle.A virus; a windows virus on a
Redhat server?

What MailScanner code is involved in generating this (possible fraud
attempt) message?

-- 
Robert Lopez
Unix Systems Administrator
Central New Mexico Community College (CNM)
525 Buena Vista SE
Albuquerque, New Mexico 87106


If the text of the URL does not match the URL, then this will be triggered.

For instance: 
Visit my nice friendly site: <a href="http://www.some.site.with.a.trjoan.com">http://www.my.safe.site.com</a>

So mailscanner would expose my attempt to trick a non-tech savvy user into visiting my malicious website.



More information about the MailScanner mailing list