message size, mark if too large?

2020-12-26 Thread Joe Acquisto-j4
Some mail with attached suspect files are larger than can be processed. Looking for a way to flag such "oversize" messages as suspect even if not processed. Is there a simple way? SpamAssassin version 3.4.2

Re: message size, mark if too large?

2020-12-26 Thread Kevin A. McGrail
What glue are you using to call SA? On Sat, Dec 26, 2020, 14:12 Joe Acquisto-j4 wrote: > Some mail with attached suspect files are larger than can be processed. > Looking for a way to flag such "oversize" messages as suspect even if not > processed. > > Is there a simple way? SpamAssassin versi

Rule for plussed adddress

2020-12-26 Thread Kenneth Porter
I usually sign up for a web service using a "plussed" address like shiva+vendorn...@sewingwitch.com. (My server also recognizes a dot instead of a plus, to deal with broken websites that won't allow me to use a plus in my email address.) I use procmail rules on my server to filter messages from

Re: Rule for plussed adddress

2020-12-26 Thread Kevin A. McGrail
Header rulename from:addr =~ /.*+.*\@/ Should match an email with a plus one the left hand side. On Sat, Dec 26, 2020, 18:11 Kenneth Porter wrote: > I usually sign up for a web service using a "plussed" address like > shiva+vendorn...@sewingwitch.com. (My server also recognizes a dot > instead

Re: message size, mark if too large?

2020-12-26 Thread Joe Acquisto-j4
Umm, err, . . . well . . . Just what I robotically entered in postfix master.cf smtp inet n - n - - smtpd -o content_filter=spamassassin Is that what you were after? >>> > What glue are you using to call SA? > > On Sat, Dec 26, 2020, 14:12 Joe Acquisto-j4

Re: message size, mark if too large?

2020-12-26 Thread Kevin A. McGrail
First, you might want to look into using spamd and spam instead of SpamAssassin here. Right now you are compiling spam assassin every single email. Spamd will demonize it waiting for a connection and spamc is that lightweight connection glue. Second, I would guess sieve or procmail depending on y

Re: message size, mark if too large?

2020-12-26 Thread Joe Acquisto-j4
I forgot about this further down master.cf: spamassassin unix - nn - - pipe flags=Rq user=spamfilter argv=/usr/local/bin/spamass.sh -e /usr/sbin/sendmail -oi -f ${sender} -- ${recipient} spamass.sh consists of: #!/bin/bash /usr/bin/spamc -s 75 | /usr/sbin/send

Re: Rule for plussed adddress

2020-12-26 Thread Bill Cole
On 26 Dec 2020, at 18:17, Kevin A. McGrail wrote: Header rulename from:addr =~ /.*+.*\@/ You definitely want to escape that '+' and catch the recipient instead of sender: header RULENAME To:addr =~ /\+.+\@/ score RULENAME -1 Another approach: whitelist_to *+*@example.com In that c