efa-project.org

Hi,

I am getting false positives with bad URL for mailto: address links. An example:
The following was added to /etc/MailScanner/phishing.safe.sites.conf:

mailto:*
*.domain.com

This did not fix the false messages.

Does anyone know what might cause this?


Thanks guys ,

Max

In the meantime,

In
I changed:
I did not notice this until just recently (after hacking around in Message.pm). This may be my solution.

max_of_tl wrote: ↑13 Jul 2022 15:20 Hi,

I am getting false positives with bad URL for mailto: address links. An example:

Code: Select all

MailScanner has detected a possible fraud attempt from "domain.com" claiming to be mailto:user@domain.com

The following was added to /etc/MailScanner/phishing.safe.sites.conf:

mailto:*
*.domain.com

This did not fix the false messages.

Does anyone know what might cause this?


Thanks guys ,

Max

According to phishing.safe.sites.conf

# Add your custom Phishing safe sites to the
# phishing.safe.sites.custom file in your MailScanner
# directory. Note that phishing.safe.sites.conf is
# overwritten when ms-update-phishing is executed.

So I've added my entries into phishing.safe.sites.custom:

*.domain.com

and then I have run the ms-update-phishing command

It works perfectly for me.

I do have to keep an eye on the messages coming in so I can update valid domain links send on behalf of another party.