Phishing warning

[Denis Beauchemin]

The bug seems to be present in mailscanner-4.81.3-1

Denis

Le 2010-10-25 07:00, Markus Nilsson a écrit :
> Sure it is a little bit outdated, but since I have a couple of servers 
> running with the same configuration, I try to minimize the number of 
> updates.
>
> Anyone with a recent version willing to do a simple test?
>
> This link will warn: *Le Service des Technologies de l'Information de 
> l'UdeS veut vous mettre en garde contre "www.domain.com" qui semble 
> être une tentative de fraude envers* *CronLab has detected a possible 
> fraud attempt from "www.domain.com" claiming to be* www.domain.com) 
> <http://www.domain.com>
>
> /Markus
>
> ------------------------------------------------------------------------
> *From: *"Martin Hepworth" <maxsec at gmail.com>
> *To: *"MailScanner discussion" <mailscanner at lists.mailscanner.info>
> *Sent: *måndag, 25 okt 2010 12:18:13
> *Subject: *Re: Phishing warning
>
> Hi
>
> that's quite an old version of MailScanner, try upgrading and see if 
> the issue still persists.
>
> -- 
> Martin Hepworth
> Oxford, UK
>
>
> On 25 October 2010 10:27, Markus Nilsson <markus at markusoft.se 
> <mailto:markus at markusoft.se>> wrote:
>
>     Hi,
>
>     The phishing filter seems to warn for a link with the name
>     "www.domain.com <http://www.domain.com>)", when pointing to
>     "www.domain.com <http://www.domain.com>".
>
>     I understand that it is not easy to create a bullet-proof phishing
>     detection, but maybe ignoring the "()[]{}" etc from the check
>     could remove a few more FP's?
>
>     I am running MailScanner (Debian) version 4.74.16-1~bpo50+1
>
>
>     BR
>     Markus
>
>     --
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>     Before posting, read http://wiki.mailscanner.info/posting
>
>     Support MailScanner development - buy the book off the website!
>
>
>
>
>
>
> This message has been scanned for viruses and dangerous content by IT 
> Staden and is believed to be clean.
>

-- 
Denis Beauchemin, analyste
Université de Sherbrooke, S.T.I.
T: 819.821.8000x62252 F: 819.821.8045