From clamav-users-bounces@lists.clamav.net  Thu May 29 10:47:56 2008
Return-Path: <clamav-users-bounces@lists.clamav.net>
X-Original-To: list@tad.clamav.net
Delivered-To: list@tad.clamav.net
X-Virus-Scanned: Debian amavisd-new at tad.clamav.net
Received: from tad.clamav.net ([127.0.0.1])
	by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id dMB8J9VdnrbI; Thu, 29 May 2008 10:47:56 +0200 (CEST)
Received: from tad.clamav.net (localhost.localdomain [127.0.0.1])
	by tad.clamav.net (Postfix) with ESMTP id E0FDB16C186;
	Thu, 29 May 2008 10:47:51 +0200 (CEST)
X-Original-To: clamav-users@tad.clamav.net
Delivered-To: clamav-users@tad.clamav.net
X-Virus-Scanned: Debian amavisd-new at tad.clamav.net
Received: from tad.clamav.net ([127.0.0.1])
	by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id w28sm1kyddEy for <clamav-users@tad.clamav.net>;
	Thu, 29 May 2008 10:47:50 +0200 (CEST)
X-Greylist: delayed 2869 seconds by postgrey-1.27 at tad;
	Thu, 29 May 2008 10:47:50 CEST
Received: from smtp1.evonet.be (smtp1.xs4all.be [195.144.64.135])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by tad.clamav.net (Postfix) with ESMTP id 429A916C08C
	for <clamav-users@lists.clamav.net>;
	Thu, 29 May 2008 10:47:50 +0200 (CEST)
Received: from esperanto.be (esperanto.be [195.144.83.8] (may be forged))
	by smtp1.evonet.be (8.13.8/8.13.8) with ESMTP id m4T7xxRd025427
	for <clamav-users@lists.clamav.net>; Thu, 29 May 2008 10:00:00 +0200
Received: from [127.0.0.1] ( [10.1.1.10])
	by esperanto.be with ESMTP (Mailtraq/2.12.1.2362) id ESPR80416C65
	for clamav-users@lists.clamav.net; Thu, 29 May 2008 09:59:57 +0200
Message-ID: <483E627B.2020603@spamcop.net>
Date: Thu, 29 May 2008 09:59:55 +0200
From: "esperanto@spamcop.net" <esperanto@spamcop.net>
Organization: Vlaamse Esperantobond v.z.w.
User-Agent: Thunderbird 2.0.0.14 (Windows/20080421)
MIME-Version: 1.0
To: ClamAV users ML <clamav-users@lists.clamav.net>
References: <200805290712.DAA12415@eclipse.cise.ufl.edu>
In-Reply-To: <200805290712.DAA12415@eclipse.cise.ufl.edu>
X-Antivirus: avast! (VPS 080529-0, 05/29/2008), Outbound message
X-FEL-Filtrilo: Rezulto=-500; maks=100; min=-250; skanis=50
X-Antivirus-Status: Clean
Subject: [Clamav-users] Phishing caught on outbound mail but not on inbound
X-BeenThere: clamav-users@lists.clamav.net
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: ClamAV users ML <clamav-users@lists.clamav.net>
List-Id: ClamAV users ML <clamav-users.lists.clamav.net>
List-Unsubscribe: <http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>,
	<mailto:clamav-users-request@lists.clamav.net?subject=unsubscribe>
List-Post: <mailto:clamav-users@lists.clamav.net>
List-Help: <mailto:clamav-users-request@lists.clamav.net?subject=help>
List-Subscribe: <http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>,
	<mailto:clamav-users-request@lists.clamav.net?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: clamav-users-bounces@lists.clamav.net
Errors-To: clamav-users-bounces@lists.clamav.net

Before I had ClamAV I used to report phishing attemps to Spamcop by 
mail. This does not work any longer, because ClamAV intercepts them. OK. 
Perfect.

But, how do the phishing attemps reach me in the first place? Why aren't 
they caught on inbound mail, when only a few seconds later they are 
caught on outbound mail?

This isn't just an exception. I had ten such cases yesterday.

Thanks!

Paul
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

