Re: check size of email

2015-06-02 Thread Kevin A. McGrail
On 6/2/2015 1:44 PM, Rajesh M wrote: is there anyway to check the size of emails or count the number of characters in an email using spamassassin ? basically i wish to mark emails that are less than 2 kb in size with long links in them as spam since they mostly spam. Yes. See Rules like __KAM

Re: check size of email

2015-06-02 Thread John Hardin
On Tue, 2 Jun 2015, Rajesh M wrote: also is there any way to check if a word / excel document contains macros. (i do not wish to use clam av.) http://impsec.org/email-tools/procmail-security.html I keep telling myself I'm going to migrate the archive filename extraction and document macro

check size of email

2015-06-02 Thread Rajesh M
hi is there anyway to check the size of emails or count the number of characters in an email using spamassassin ? basically i wish to mark emails that are less than 2 kb in size with long links in them as spam since they mostly spam. also is there any way to check if a word / excel document co

Re: shortcircuit dnsbl/uribl

2015-06-02 Thread RW
On Tue, 02 Jun 2015 14:36:07 +0200 Reindl Harald wrote: > given that USER_IN_SPF_WHITELIST score with -100 here there is no > real point to fire up all the other tests, it's clear anyways that > this message will pass As far as possible spamassassin does network test in parallel with each other

shortcircuit dnsbl/uribl

2015-06-02 Thread Reindl Harald
is there a way to skip DNSBL/URIBL if a message hits the rule below, i tried to define dnsbl-rules with "priority CUST_DNSBL -450" but that don't change anything given that USER_IN_SPF_WHITELIST score with -100 here there is no real point to fire up all the other tests, it's clear anyways that

Re: fwd.facebook.com envelope sender spam

2015-06-02 Thread Reindl Harald
Am 02.06.2015 um 11:00 schrieb Benny Pedersen: On June 2, 2015 4:32:04 AM Reindl Harald wrote: > hmm, is it only me that see forwarded hotmail spam comming via facebook > dkim signed mail? no and that are forwarded mails indead, fond that facebook now forwards email, make them mitm proble

Re: fwd.facebook.com envelope sender spam

2015-06-02 Thread Benny Pedersen
On June 2, 2015 4:32:04 AM Reindl Harald wrote: > hmm, is it only me that see forwarded hotmail spam comming via facebook > dkim signed mail? no and that are forwarded mails indead, fond that facebook now forwards email, make them mitm problem, but atleast its possible to dissable facebook