<div dir="ltr">Ok it is working....<div><br></div><div><div>Helps to examine the HTML version of the email..lol</div><div><br></div><div>In this case it is using {Disarmed} instead of {Fraud}</div><div><br></div><div>Looks good...</div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Aug 14, 2016 at 5:21 PM, Shawn Iverson <span dir="ltr"><<a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Running on 5.0.3-7<div><br></div><div>So far looks good. I am unable to test avast/esets since I do not have those.</div><div><br></div><div>time-wait appears to be working</div><div><br></div><div>I am testing the phishing...I am having some difficulty with this one.</div><div><br></div><div>I am seeing this when I try to trigger...</div><div><br></div><div>...</div><div><div>Aug 14 17:14:11 smtp MailScanner[4242]: Found phishing fraud from <a href="http://example.org/" target="_blank">http://example.org/</a> claiming to be <a href="http://www.someortherwebsite.org" target="_blank">www.someortherwebsite.org</a> in 258C8100083.AC563</div><div>Aug 14 17:14:11 smtp MailScanner[4104]: Content Checks: Detected and have disarmed phishing tags in HTML message in 258C8100083.AC563 ...</div></div><div><br></div><div>All well and good in the log itself, except the email that is delivered is the unmodified original. The phishing fraud is not being highlighted, and the {Fraud?} prefix is not prepended :/</div><div><br></div><div>I have the following in MailScanner.conf:</div><div><br></div><div><div>Find Phishing Fraud = yes</div><div>Also Find Numeric Phishing = yes</div><div>Use Stricter Phishing Net = yes</div><div>Highlight Phishing Fraud = yes</div></div><div><div>Phishing Modify Subject = start</div><div>Phishing Subject Text = {Fraud?}</div></div><div><br></div><div>Poking around system to see what is happening....</div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Aug 14, 2016 at 12:39 PM, Jerry Benton <span dir="ltr"><<a href="mailto:jerry.benton@mailborder.com" target="_blank">jerry.benton@mailborder.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I have tested these, but I would like some verification before I post<br>
them as releases.<br>
<br>
<br>
08/14/2016 Changes in v5.0.3-7<br>
==============================<wbr>====<br>
- updated init script to include a time-wait for pid files during<br>
process reloads and restarts<br>
- updated Message.pm to correctly prepend phishing notices in email<br>
subject<br>
- added avast virus scanner support<br>
- added esets virus scanner support<br>
- added new function InitClamdParser to SweepViruses.pm<br>
- added new function ProcessClamdOutput to SweepViruses.pm<br>
<br>
<br>
Debian: <a href="https://s3.amazonaws.com/msv5/release/MailScanner-5.0.3-7.deb.tar.gz" rel="noreferrer" target="_blank">https://s3.amazonaws.c<wbr>om/msv5/release/MailScanner-5.<wbr>0.3-7.deb.tar.gz</a><br>
RHEL: <a href="https://s3.amazonaws.com/msv5/release/MailScanner-5.0.3-7.rhel.tar.gz" rel="noreferrer" target="_blank">https://s3.amazonaws.com<wbr>/msv5/release/MailScanner-5.0.<wbr>3-7.rhel.tar.gz</a><br>
SuSE: <a href="https://s3.amazonaws.com/msv5/release/MailScanner-5.0.3-7.suse.tar.gz" rel="noreferrer" target="_blank">https://s3.amazonaws.com<wbr>/msv5/release/MailScanner-5.0.<wbr>3-7.suse.tar.gz</a><br>
NIX: <a href="https://s3.amazonaws.com/msv5/release/MailScanner-5.0.3-7.nix.tar.gz" rel="noreferrer" target="_blank">https://s3.amazonaws.com/<wbr>msv5/release/MailScanner-5.0.3<wbr>-7.nix.tar.gz</a><br>
<br>
<br>
-<br>
Jerry Benton<br>
<a href="http://www.mailborder.com" rel="noreferrer" target="_blank">www.mailborder.com</a><br>
<a href="tel:%2B1%20-%20844-436-6245" value="+18444366245" target="_blank">+1 - 844-436-6245</a><br>
<span><font color="#888888"><br><span class="HOEnZb"><font color="#888888">
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.<wbr>info</a><br>
<a href="http://lists.mailscanner.info/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/<wbr>listinfo/mailscanner</a><br>
<br>
</font></span></font></span></blockquote></div><span class="HOEnZb"><font color="#888888"><br><br clear="all"><div><br></div>-- <br><div data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr">Shawn Iverson<div>Director of Technology</div><div>Rush County Schools</div><div><a href="tel:765-932-3901%20x271" value="+17659323901" target="_blank">765-932-3901 x271</a></div><div><a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a></div><div><br></div><div><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ" width="96" height="96" style="font-size:12.8px"><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_UFV2VFdmNG1SaVE&revid=0Bw5iD0ToYvs_U3VaVlpuTFBtak9QZXVRL3FmRUd2d0laTkZRPQ" width="96" height="39"><br></div></div></div></div></div></div></div>
</font></span></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr">Shawn Iverson<div>Director of Technology</div><div>Rush County Schools</div><div>765-932-3901 x271</div><div><a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a></div><div><br></div><div><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ" width="96" height="96" style="font-size:12.8px"><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_UFV2VFdmNG1SaVE&revid=0Bw5iD0ToYvs_U3VaVlpuTFBtak9QZXVRL3FmRUd2d0laTkZRPQ" width="96" height="39"><br></div></div></div></div></div></div></div>
</div>