Re: Anti Phish Rules

2018-04-26 Thread Matus UHLAR - fantomas
On 26.04.18 18:00, Nick Edwards wrote: We've been using a separate product to do this, but it struck me, maybe spamassassin can do this easier (or without having to call yet another binary to run as can over mails) Rules that look at URLs in a html message href and src tags, check the "A" tag t

Re: Anti Phish Rules

2018-04-26 Thread Emanuel Gonzalez
ld you apply some verification for the signature dkim? I'm working in it De: Matus UHLAR - fantomas Enviado: jueves, 26 de abril de 2018 5:12:05 Para: users@spamassassin.apache.org Asunto: Re: Anti Phish Rules On 26.04.18 18:00, Nick Edwards wrote: >We&#

Re: Anti Phish Rules

2018-04-26 Thread David Jones
, 2018 7:08 AM To: Matus UHLAR - fantomas; users@spamassassin.apache.org Subject: Re: Anti Phish Rules Here is an example of an phishing email: Authentication-Results: spf=none (sender IP is 200.58.117.126) smtp.mailfrom=ppl3.com; hotmail.com; dkim=fail (body hash did not verify) header.d=

Re: Anti Phish Rules

2018-04-26 Thread shanew
On Thu, 26 Apr 2018, David Jones wrote: header          __BAD_FROM_NAME     From:name =~ /(^chase$|chase\.com|Internal Revenue Service|banking|Bank of America|American Express|Wells Fargo|NavyFederal|Geico|E-fax|Share.oint|UPS Delivery|FedEx|PayPal|Apple Support|USAA|.ropbox|Dro.box)/i meta     

Re: Anti Phish Rules

2018-04-26 Thread David Jones
a rule just like this with full names of spoofing targets like CEOs and finance people to block fake requests to transfer money or click a link. From: sha...@shanew.net Sent: Thursday, April 26, 2018 10:01 AM To: users@spamassassin.apache.org Subject: Re: Anti

Re: Anti Phish Rules

2018-04-26 Thread Noel Butler
On 26/04/2018 18:12, Matus UHLAR - fantomas wrote: > On 26.04.18 18:00, Nick Edwards wrote: > >> We've been using a separate product to do this, but it struck me, maybe >> spamassassin can do this easier (or without having to call yet another >> binary to run as can over mails) >> >> Rules that

RE: Anti Phish Rules

2018-04-26 Thread Kevin Miller
] Sent: Thursday, April 26, 2018 12:51 PM To: users@spamassassin.apache.org Subject: Re: Anti Phish Rules On 26/04/2018 18:12, Matus UHLAR - fantomas wrote: On 26.04.18 18:00, Nick Edwards wrote: We've been using a separate product to do this, but it struck me, maybe spamassassin can do this

Re: Anti Phish Rules

2018-04-26 Thread David Jones
ersion, is helping Jerry maintain MailScanner now as part of his EFA project. https://efa-project.org/ From: Kevin Miller Sent: Thursday, April 26, 2018 4:16 PM To: users@spamassassin.apache.org Subject: RE: Anti Phish Rules It’s not abandonware – Jules handed

Re: Anti Phish Rules

2018-04-27 Thread Matus UHLAR - fantomas
On 26.04.18 18:00, Nick Edwards wrote: We've been using a separate product to do this, but it struck me, maybe spamassassin can do this easier (or without having to call yet another binary to run as can over mails) Rules that look at URLs in a html message href and src tags, check the "A" tag t

Re: Anti Phish Rules

2018-04-27 Thread Noel Butler
Alaska 99801 > > Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357 > > FROM: Noel Butler [mailto:noel.but...@ausics.net] > SENT: Thursday, April 26, 2018 12:51 PM > TO: users@spamassassin.apache.org > SUBJECT: Re: Anti Phish Rules > > On 2

Re: Anti Phish Rules

2018-04-27 Thread Noel Butler
On 27/04/2018 17:53, Matus UHLAR - fantomas wrote: > On 27.04.18 06:51, Noel Butler wrote: > >> I suspect Nick is still using and referring to mailscanner (which is/was >> written in perl), it has/had this ability, I (like a good few of the >> names around here) used it back in the day as well,