laoluoyebamiji / anti-phishing-email-reply Goto Github PK

Hi Folks,

It has come to my notice that your excellent list contains one of our email
address :  [email protected].

Toni's account was compromised about a year ago and was used to send
phishing emails for a few hours before I got it shutdown.   So far as I
know it was never used as a phishing reply-to.

Anyway that address has been clean for at least a year and Toni now knows
not to reply to phishing emails ;)

Would you please remove her address from the list.

Russell

Russell FUlton, information security officer
the university of auckland.

What steps will reproduce the problem?

$ ./add-address-to-list.pl [email protected]
specify type: AB
specify date: 20110713

What is the expected output? What do you see instead?

EXPECTED:
$ svn diff
No change.  Address already existed with identical types and with a newer date.

OBSERVED:
notice the duplicated type flags created by the perl script.
$ svn diff
Index: phishing_reply_addresses
===================================================================
--- phishing_reply_addresses    (revision 4832)
+++ phishing_reply_addresses    (working copy)
@@ -12746,7 +12746,7 @@
 [email protected],A,20100404
 [email protected],A,20100404
 [email protected],E,20100812
[email protected],AB,20110714
[email protected],AABB,20110714
 [email protected],A,20081210
 [email protected],E,20101205
 [email protected],A,20090109


What version of the product are you using? On what operating system?

Ubuntu linux.
$ svn up
At revision 4832.


Please provide any additional information below.

Here is observed behaviour for similar case with a single type:

$ ./add-address-to-list.pl [email protected]
specify type: E
specify date: 20100811
$ svn diff 
$

It would be nice to see implementation examples for MTAs (or even the
different ways different sites have implemented it, even if they're using
the same MTA).

For example, I'll be working up an implementation for using APER with
CommuniGate Pro ... and I'll be happy to contribute that.

But it would be interesting to see how people have implemented it on other
MTAs.  Sendmail milters, Sendmail access files, etc.

What steps will reproduce the problem?
1. Download the file at
http://anti-phishing-email-reply.googlecode.com/svn/trunk/phishing_reply_address
es
2. search for 2009
3.

What is the expected output? What do you see instead?
I see the following entry:
[email protected],A,20091002

I do not expect to see a date that far in the future. I'm assuming that it
should be 2008.


What version of the product are you using? On what operating system?


Please provide any additional information below.

Several of the entries in the list are dated as one of the following:

- 20091019
- 20091009
- 20091002

Those dates are, of course, *October* 2009.  I'm pretty sure they should 
all be corrected to be 200901xx (January 2009).

Cheers!

The current download from
http://anti-phishing-email-reply.googlecode.com/svn/trunk/phishing_reply_address
es
contains multiple entries with type E.  This type is not documented in the
wiki guidelines.