Phishing Whitelisting entries not working

[Thomas Lohman]

Hi,

Double check that your "site.com" string is not also somehow matched in 
the master bad phishing sites conf file that is downloaded.  I had a 
similar issue sometime in the past and wrote my own program to process 
the safe and bad master files and remove anything from bad that seemed 
to also be matched in safe.

For example, this is in safe:

*.google.com

and these are in bad:

drive.google.com
plus.google.com
www.sites.google.com
chrome.google.com
play.google.com
appengine.google.com

I guess it all depends on which one you want to take precedence but I 
remove the above from the bad master based on the "*.google.com" safe 
entry since it seemed like the bad list was taking precedence.


--tom

On 07/26/2018 10:11 AM, Pramod Daya wrote:
>
> Ver 5.0.3-7
>
> *From:*MailScanner 
> <mailscanner-bounces+pramod=mindspring.co.za at lists.mailscanner.info> 
> *On Behalf Of *Shawn Iverson
> *Sent:* Thursday, 26 July 2018 15:47
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Re: Phishing Whitelisting entries not working
>
> Version of mailscanner?
>
> On Thu, Jul 26, 2018, 3:03 AM Pramod Daya <pramod at mindspring.co.za 
> <mailto:pramod at mindspring.co.za>> wrote:
>
>     Hi,
>
>     I’m using the latest version of ms-update-phishing to download
>     phishing lists, and putting whitelisted sites into
>     /etc/MailScanner/phishing.safe.sites.custom. They get merged with
>     phishing.safe.sites.conf when ms-update-phishing runs.
>
>     However, email from sites that I whitelist still get a {Disarmed}
>     tag.
>
>     I’ve tried adding user at site.com <mailto:user at site.com>, .site.com
>     <http://site.com>, *.site.com <http://site.com>, but I’m not winning.
>
>     Any pearls of wisdom, please ?
>
>     Tnx,
>
>     Pramod
>
>
>
>     -- 
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180726/5b93554c/attachment.html>