efa-project.org

Posted: **12 Jun 2017 14:32**

I have "Use stricter phishing net" disabled and yet Mailscanner keeps complaining about this supposed phishing attempt:

MailScanner has detected a possible fraud attempt from "www.telekom.de" claiming to be www.telekom.com/geschäftskunden

does that make sense? I thought this was exactly the case which should be prevented by "Use stricter phishing net"

Posted: **12 Jun 2017 21:13**

Isn't that caused by the Detect Phishing Fraud = yes in MailScanner.conf?

Posted: **13 Jun 2017 06:00**

Not sure, I thought not but I might be wrong. I understood that whatever.tld1 would not trigger when the link actually is wahtver.tld2

Here are the respective definitions if someone wants to weigh in:
https://www.mailscanner.info/MailScanne ... .html#Find Phishing Fraud
https://www.mailscanner.info/MailScanne ... x.html#Use Stricter Phishing Net

Question about phishing and mailscanner