RE: Dangerous in-line attachments

Pramod Daya via MailScanner <mailscanner-qhrM8SXbD5JTOyd/[email protected]> Sun, 12 Dec 2021 11:10:21 +0000
Newsgroups gmane.mail.virus.mailscanner
Message-ID <JNZP275MB086770BE9B5CC204932E6DCDF7739@JNZP275MB0867.ZAFP275.PROD.OUTLOOK.COM>
Thank you.  I put "bit.ly" into the phishing.bad.sites.custom as per the docs - but perhaps the phishing.bad.sites.config is putting a subse          quent incorrect entry for "bit.ly." which is overwriting my entry.

From: MailScanner <mailscanner-bounces+pramod=mindspring.co.za-qhrM8SXbD5L6gbPvEgmw2w@public.gmane.orgscanner.info> On Behalf Of L.P.H. van Belle via MailScanner
Sent: Wednesday, 08 December 2021 10:30
To: MailScanner Discussion <mailscanner-qhrM8SXbD5JTOyd/[email protected]>
Cc: L.P.H. van Belle <belle-nYx6fZnhHJ5mR6Xm/[email protected]>
Subject: RE: Dangerous in-line attachments

bit.ly is a "url shorter service"
the phishing.bad.sites.conf.master.  file has a link with a typo i think.
that shows bit.ly.  ( with the last dot )

you can add it in :  phishing.bad.sites.custom
Then its in again.

Greetz,

Louis
________________________________
Van: MailScanner [mailto:mailscanner-bounces+belle=bazuin.nl-qhrM8SXbD5KZ6LSh8oV7ow@public.gmane.organner.info] Namens Pramod Daya via MailScanner
Verzonden: dinsdag 7 december 2021 21:01
Aan: mailscanner-qhrM8SXbD5JTOyd/[email protected]<mailto:mailscanner-qhrM8SXbD5JTOyd/[email protected]>
CC: Pramod Daya
Onderwerp: Dangerous in-line attachments
I'm getting links like this not getting picked up by Mailscanner  (using a LibraEsva tester)



[cid:[email protected]]
Pointing, as you can see, to a dodgy website (the one at bit.ly).

I must be omitting some obvious setting that's  allowing these through..  I would deeply appreciate some assistance on how to detect them, please.

___________________________________________________
Pramod Daya (CEO)
M.Sc. Computer Science (U. of Oregon)
Unit 5, Melomed Office Park
Punters Way, Kenilworth
Cape Town, South Africa 7708
www.mindspring.co.za<http://www.mindspring.co.za/>
            [cid:[email protected]]
Work:  +27 21 657 1780
Fax:  +27 21 671 7599
  Cell:  +27 83 675 0367
[email protected]<mailto:[email protected]>



-- 
MailScanner mailing list
mailscanner-qhrM8SXbD5JTOyd/[email protected]
http://lists.mailscanner.info/mailman/listinfo/mailscanner
image001.png (image/png, 12.8 KB) - not displayed
image002.png (image/png, 5.8 KB) - not displayed