change mailscanners treatment of phishing

silver_2000 · Post by **silver_2000** » 02 Mar 2009, 21:38

Im getting customers complianing of false positives

"At Mon Mar 2 13:19:17 2009 the scanner said: Clamd: message was infected: Phishing.Heuristics.Email.SpoofedDomain"

in mailscanner phishing is turned off

Find Phishing Fraud = NO
Also Find Numeric Phishing =YES

How can I tweak the phising filter to catch less false positives ?

Post by **chirpy** » 06 Mar 2009, 10:50

That's from ClamAV, not MailScanner. You'll have to look at the ClamAV configuration for that.

silver_2000 · Post by **silver_2000** » 06 Mar 2009, 13:53

thanks !! appreciate the reply