<div dir="ltr">Jerry,<div><br></div><div>I think all is well.  I was using mutt and was looking at the text version of the email.  The HTML version is properly tagged and has the {Disarmed} in the subject line.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Aug 14, 2016 at 8:33 PM, Jerry Benton <span dir="ltr"><<a href="mailto:jerry.benton@mailborder.com" target="_blank">jerry.benton@mailborder.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Shawn,<br>
<br>
Is the site also in your phishing.safe.sites.custom? of .conf?<br>
<br>
Note this changed:<br>
<a href="https://github.com/MailScanner/v5/commit/52d9c4e27e62418251daa4deb219ba132812ce39" rel="noreferrer" target="_blank">https://github.com/<wbr>MailScanner/v5/commit/<wbr>52d9c4e27e62418251daa4deb219ba<wbr>132812ce39</a><br>
<br>
<br>
<br>
<br>
-<br>
Jerry Benton<br>
<a href="http://www.mailborder.com" rel="noreferrer" target="_blank">www.mailborder.com</a><br>
<a href="tel:%2B1%20-%20844-436-6245" value="+18444366245">+1 - 844-436-6245</a><br>
<br>
<br>
-----Original Message-----<br>
From: Shawn Iverson <<a href="mailto:iversons@rushville.k12.in.us">iversons@rushville.k12.in.us</a>><br>
Reply: MailScanner Discussion <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.<wbr>mailscanner.info</a>><br>
Date: August 14, 2016 at 5:22:15 PM<br>
To: MailScanner Discussion <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.<wbr>mailscanner.info</a>><br>
Subject:  Re: MailScanner v5.0.3-7<br>
<br>
> Running on 5.0.3-7<br>
><br>
> So far looks good. I am unable to test avast/esets since I do not have<br>
> those.<br>
><br>
> time-wait appears to be working<br>
><br>
> I am testing the phishing...I am having some difficulty with this one.<br>
><br>
> I am seeing this when I try to trigger...<br>
><br>
> ...<br>
> Aug 14 17:14:11 smtp MailScanner[4242]: Found phishing fraud from<br>
> <a href="http://example.org/" rel="noreferrer" target="_blank">http://example.org/</a> claiming to be <a href="http://www.someortherwebsite.org" rel="noreferrer" target="_blank">www.someortherwebsite.org</a> in<br>
> 258C8100083.AC563<br>
> Aug 14 17:14:11 smtp MailScanner[4104]: Content Checks: Detected and have<br>
> disarmed phishing tags in HTML message in 258C8100083.AC563 ...<br>
><br>
> All well and good in the log itself, except the email that is delivered is<br>
> the unmodified original. The phishing fraud is not being highlighted, and<br>
> the {Fraud?} prefix is not prepended :/<br>
><br>
> I have the following in MailScanner.conf:<br>
><br>
> Find Phishing Fraud = yes<br>
> Also Find Numeric Phishing = yes<br>
> Use Stricter Phishing Net = yes<br>
> Highlight Phishing Fraud = yes<br>
> Phishing Modify Subject = start<br>
> Phishing Subject Text = {Fraud?}<br>
><br>
> Poking around system to see what is happening....<br>
><br>
><br>
><br>
><br>
> On Sun, Aug 14, 2016 at 12:39 PM, Jerry Benton<br>
> wrote:<br>
><br>
> > I have tested these, but I would like some verification before I post<br>
> > them as releases.<br>
> ><br>
> ><br>
> > 08/14/2016 Changes in v5.0.3-7<br>
> > ==============================<wbr>====<br>
> > - updated init script to include a time-wait for pid files during<br>
> > process reloads and restarts<br>
> > - updated Message.pm to correctly prepend phishing notices in email<br>
> > subject<br>
> > - added avast virus scanner support<br>
> > - added esets virus scanner support<br>
> > - added new function InitClamdParser to SweepViruses.pm<br>
> > - added new function ProcessClamdOutput to SweepViruses.pm<br>
> ><br>
> ><br>
> > Debian: <a href="https://s3.amazonaws.com/msv5/release/MailScanner-" rel="noreferrer" target="_blank">https://s3.amazonaws.com/msv5/<wbr>release/MailScanner-</a><br>
> > 5.0.3-7.deb.tar.gz<br>
> > RHEL: <a href="https://s3.amazonaws.com/msv5/release/MailScanner-" rel="noreferrer" target="_blank">https://s3.amazonaws.com/msv5/<wbr>release/MailScanner-</a><br>
> > 5.0.3-7.rhel.tar.gz<br>
> > SuSE: <a href="https://s3.amazonaws.com/msv5/release/MailScanner-" rel="noreferrer" target="_blank">https://s3.amazonaws.com/msv5/<wbr>release/MailScanner-</a><br>
> > 5.0.3-7.suse.tar.gz<br>
> > NIX: <a href="https://s3.amazonaws.com/msv5/release/MailScanner-5.0.3-7.nix.tar.gz" rel="noreferrer" target="_blank">https://s3.amazonaws.com/msv5/<wbr>release/MailScanner-5.0.3-7.<wbr>nix.tar.gz</a><br>
> ><br>
> ><br>
> > -<br>
> > Jerry Benton<br>
> > <a href="http://www.mailborder.com" rel="noreferrer" target="_blank">www.mailborder.com</a><br>
> > <a href="tel:%2B1%20-%20844-436-6245" value="+18444366245">+1 - 844-436-6245</a><br>
> ><br>
> ><br>
> > --<br>
> > MailScanner mailing list<br>
> > <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.<wbr>info</a><br>
> > <a href="http://lists.mailscanner.info/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/<wbr>listinfo/mailscanner</a><br>
> ><br>
> ><br>
><br>
><br>
> --<br>
> Shawn Iverson<br>
> Director of Technology<br>
> Rush County Schools<br>
> <a href="tel:765-932-3901%20x271" value="+17659323901">765-932-3901 x271</a><br>
> <a href="mailto:iversons@rushville.k12.in.us">iversons@rushville.k12.in.us</a><br>
><br>
<span class="HOEnZb"><font color="#888888">><br>
> --<br>
> MailScanner mailing list<br>
> <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.<wbr>info</a><br>
> <a href="http://lists.mailscanner.info/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/<wbr>listinfo/mailscanner</a><br>
><br>
><br>
<br>
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.<wbr>info</a><br>
<a href="http://lists.mailscanner.info/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/<wbr>listinfo/mailscanner</a><br>
<br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr">Shawn Iverson<div>Director of Technology</div><div>Rush County Schools</div><div>765-932-3901 x271</div><div><a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a></div><div><br></div><div><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ" width="96" height="96" style="font-size:12.8px"><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_UFV2VFdmNG1SaVE&revid=0Bw5iD0ToYvs_U3VaVlpuTFBtak9QZXVRL3FmRUd2d0laTkZRPQ" width="96" height="39"><br></div></div></div></div></div></div></div>
</div>