Scan Attachment Content Using Spamassassin

[KADAM, SIDDHESH]

 Note: My email address has been changed. Please use @netcorecloud.com in future communications.




  
  
Hello Folks,
 
Is there any possible way using we can scan
for the content of an attachment ie .doc/pdf/.xls/ppt etc...
Planning is to have a DLP kind of protection
with the help of Spamassassin.   
  
 
Regards,
Siddhesh
  

Re: Spamassassin Email Alert

[KADAM, SIDDHESH]

Hi,

I want to send a mail to local admin If any mail body matches a content 
of a specific words.



On 9/2/2020 4:01 PM, Matus UHLAR - fantomas wrote:

On 02.09.20 15:44, KADAM, SIDDHESH wrote:

  Using spamassassin is there any way of trigger email notification to
  specific ID, if email body matches with list of pattern.


not with using spamassassin.
SpamAsasin only detects if mail is spam, nothing more.

There are different way to do this.

What exactly do you want?

Spamassassin Email Alert

[KADAM, SIDDHESH]

  
  
Hi Folks,
Using spamassassin is there any way of
trigger email notification to specific ID, if email body matches
with list of pattern.
Regards,
Siddhesh
  


  

Best Possible Way To Block Phish/Malware URL

[KADAM, SIDDHESH]

  
  
Guys,
Can anybody suggest me a best possible way
to block phish/malware url from body of an email using
spamassassin. 
  
I Tried GoogleSafeBrowsing but not helping
much as it has very low detection ratio. 
  
Regards,
Siddhesh
  


  

Spam Mail

[KADAM, SIDDHESH]

Team,

Anyway of blocking attached spam mail of Corona.

Regards,
Siddhesh Kadam

--- Begin Message ---
I know eνery dirty lιtτle secreτ αbοuτ yοur lιfe. Tο ρrοve my ροιnτ, tell me, does "28884060" rιng any bell το yοu? It was οne of your passwοrds. 

What do I κnow αbοuτ yοu?

Tο starτ with, Ι κηοw αll οf yοur ρasswοrds. Ι αm awαre of your whereαbouτs, whaτ you eατ, wιτh whom yοu ταlk, every little thing yοu do ιn a day. 

Whατ αm Ι capαble οf doιηg?

If I wαηt, Ι could even ιnfecτ yοur whole fαmιly wιth τhe CorοnαVirus, reνeαl αll of your secrets. There are counτless things Ι cαη do.

Whατ shοuld you dο? 

You need το ραy me $4000. You'll maκe τhe ραymeητ νia βιtcοιn to τhe belοw-mentιοηed αddress. Ιf yοu dοn'τ κηow how to dο τhis, seαrch "hοw to buy biτcoιn" in Gοogle.

Βιτcοιn Address: 


bc1qvs84u9q3gx5prng5n9ercma7lc5vdvqzfjp9x2


(Ιt ιs cAsE seηsitiνe, so cοpy and pasτe iτ) 

You hανe 24 hours to make τhe pαymeηt. Ι haνe α unique pιxel wιthιη τhis email message, aηd righτ ηοw, Ι κηοw τhατ you have reαd τhιs emαil.

Ιf Ι dο not geτ τhe payment:

I wιll ιηfect eνery member οf yοur family wiτh τhe CοrοnaVιrus. No mατter how smαrτ yοu are, believe me, if Ι wanτ to affecτ, I cαn. Ι wιll alsο gο aheαd and reνeal yοur secrets. Ι wιll cοmρletely ruιn your life.

Noneτheless, if Ι dο geτ ρaid, I will erαse eνery lιtτle iηfοrmατιοη I haνe about yοu immedιaτely. Yοu wιll ηeνer hear frοm me αgaιη. Ιτ is α noη-negoτiable οffer, so don'τ wαsτe my time αnd yours by replying to τhιs emaιl.

Sasha
--- End Message ---

Spamassassin Debug Logs

[KADAM, SIDDHESH]

Hi,

I have Postfix+MailScanner integreated with Spamassassin, I want to 
enable debug logs of Spamassassin for all mail transactions.


I know spamassassin -D -t /tmp/sid.eml but this is limited to single 
mail. I want something which can store all debug logs in run time.


Regards,
Siddhesh Kadam

Way To Block A Specific Word From Image

[KADAM, SIDDHESH]

Hi Folks,

Is there any possibilities of blocking a specific word from an image 
using SpamAssassin ?


Regards,
Siddhesh

Re: How to Bypass Specific Spamassassin Rule

[KADAM, SIDDHESH]

Thanks All

@Henrik It worked 

On 11/15/2019 3:41 PM, Henrik K wrote:

If you don't want to hit it at all for some recipient, you can try
redefining the whole UNWANTED_LANGUAGE_BODY rule into a meta.

body __UNWANTED_LANGUAGE_BODY eval:check_language()
header __UNWANTED_LANGUAGE_SKIP X-Envelope-To =~ /\@foo\.com>/i
meta UNWANTED_LANGUAGE_BODY __UNWANTED_LANGUAGE_BODY && 
!__UNWANTED_LANGUAGE_SKIP

Note that X-Envelope-To might be Amavis specific header..  you can check
basic To header also, but it can be faked or missing unlike envelope
address.


On Fri, Nov 15, 2019 at 11:51:12AM +0530, KADAM, SIDDHESH wrote:

Hi Folks,

I have multiple domains which are running after Spamassassin server.

I want to bypass one specific Spamassassin rule ie TextCat(Unwanted
Language) for one recipient domain.

Can someone please help me in achieving this requirement.

Regards,
Siddhesh

How to Bypass Specific Spamassassin Rule

[KADAM, SIDDHESH]

Hi Folks,

I have multiple domains which are running after Spamassassin server.

I want to bypass one specific Spamassassin rule ie TextCat(Unwanted 
Language) for one recipient domain.


Can someone please help me in achieving this requirement.

Regards,
Siddhesh

SpamAssassin Rule To Block URL Which Contents Recipient Domain Name

[KADAM, SIDDHESH]

Hi,

Can we assign a high score to mail which has an URL which contents a 
recipient domain name or recipient email ID ?


I have been seeing lots of cases of Phish URL where spammer tries to 
pull end user's password by sending these URLs over mail.


Regards,
Siddhesh

List Of Available Spamassassin Rule

[KADAM, SIDDHESH]

Hi Folks,

Can someone please help me in retrieving a list of present rules of 
Spamassassin.


Spamassassin --lint or -D option I tried but not getting expected output.

Regards,
Siddhesh

External Tag In Mail

[KADAM, SIDDHESH]

Hi Guys,

Using Spamassassin can we add word *EXTERNAL *in body of the email when 
it comes from external world.


Thanks In Advanced.
Siddhesh