MailScanner - fraud detection - turning it off

[bostjanc]

Hi there!

In /etc/MailScanner/MailScanner.conf we have changed: Find Phishing Fraud from yes to and then did service restart MailScanner, but Efa still makes "Fraud inspection"

EXAMPLE: MailScanner has detected a possible fraud attempt from "www.google.si" claiming to be www.facebook.com

Was that not the right place to turn off that inspection?

Please help.

With best regards

[bostjanc]

Another thing, if I change also this settings in MailScanner.conf:
(from yes to no): Highlight Phishing Fraud = no
it does not reflect, because it's still higlights it, even after doing service mailscanner restart.
strange.

[bostjanc]

service mailscanner reload also does not change this behavour, hm ran out of ideas...
We are on latest 3.0.2.3 version. Is it a bug?

[shawniverson]

Here's another setting, tried this one?

Code: Select all

Use Stricter Phishing Net = yes

[bostjanc]

Hi swaniverson.
1st of all thank you for your reply.
I had that setting "Use Stricer Phishing Net" already set on NO.
I have just figured out where I had made "a noobish mistake".
Before editing /etc/MailScanner/MailScanner.conf I made a dumb copy:
cp /etc/MailScanner/MailScanner.conf /etc/MailScanner/MailScanner-backup.conf

I guess Efa took MailScanner-backup.conf for "working version" no matter what changes did I do to /etc/MailScanner/MailScanner.conf.
After I have ran command mv MailScanner-backup.conf MailScanner-backup-conf.old and restarted mailscanner service it worked!

So it was a classic lack of Linux knowledge with renaming files in the correct way