Phishing Server Change

[Jerry Benton]

If anyone wants to test this with the old server that has wget enabled, please update your hosts to use:

 

198.199.100.78 phishing.mailscanner.info

 

or

 

2604:a880:1:20::35c1:f001 phishing.mailscanner.info

 

 

That is the old server and it has wget enabled. I will leave it on for a week or so. Make sure you remove the entry from the test file afterwards !

 

 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Friday, August 4, 2017 10:38 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Phishing Server Change

 

Jerry,

 

I'll test.  I am already testing ms-init, packaging.....etc...

 

On Aug 3, 2017 1:03 AM, "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> > wrote:

Please use the updated version of the phishing updates script from
http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary
method, which support gzip by default. The fallback is wget, which uses more
bandwidth. Most servers are still using the older update script version that
uses wget as the primary method. (You cannot just tell wget to use gzip
because the downloaded file ends up staying compressed and thus useless.)

The phishing server does about 550GB per month in transfers. Using wget the
bad phishing file transfer size is 280081 and with curl it is 119027. That
is almost half the transfer size. I would like to try to get that 550GB
number down. I don't want to have to pull out the big stick and start
blocking wget user agents, so please help me out here.

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please
change your cron settings to something less taxing. Again, I don't want to
pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1 (843) 800-8605 <tel:%2B1%20%20%20%28843%29%20800-8605> 
+44 (020) 3883-8605 <tel:%2B44%20%28020%29%203883-8605> 





--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/6b08ebee/attachment.html>