On 27/04/2018 07:27, David Jones wrote:
> MailScanner became very mature and didn't need any major updates for years
> then Jules turned it over to Jerry Benton who had a commercial product based
> on it. It's still being updated and runs fine now on systemd-based OSes and
> newer versions of Perl. One of our customers, Shawn Iversion, is helping
> Jerry maintain MailScanner now as part of his EFA project.
> https://efa-project.org/
>
> -------------------------
>
> FROM: Kevin Miller <kevin.mil...@juneau.org>
> SENT: Thursday, April 26, 2018 4:16 PM
> TO: users@spamassassin.apache.org
> SUBJECT: RE: Anti Phish Rules
>
> It's not abandonware - Jules handed it off to some other folks that are
> actively putting out new versions. As a matter of fact one came out not too
> long ago. MailWatch for MailScanner is also being actively developed still.
>
> Latest/greatest is available at www.mailscanner.info [1] for anyone wanting
> to check it out.
>
> ...Kevin
>
> --
>
> Kevin Miller
>
> Network/email Administrator, CBJ MIS Dept.
>
> 155 South Seward Street
>
> Juneau, Alaska 99801
>
> Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357
>
> FROM: Noel Butler [mailto:noel.but...@ausics.net]
> SENT: Thursday, April 26, 2018 12:51 PM
> TO: users@spamassassin.apache.org
> SUBJECT: Re: Anti Phish Rules
>
> On 26/04/2018 18:12, Matus UHLAR - fantomas wrote:
>
>> On 26.04.18 18:00, Nick Edwards wrote:
>>
>> We've been using a separate product to do this, but it struck me, maybe
>> spamassassin can do this easier (or without having to call yet another
>> binary to run as can over mails)
>>
>> Rules that look at URLs in a html message href and src tags, check the "A"
>> tag to see if there is a URL there, and if they do not match, consider it
>> a phis so apply said phis score to the message.
>>
>> Has anyone done this? module even?
>>
>> the main problem: may non-spam senders do that, see:
>>
>> https://wiki.apache.org/spamassassin/AntiPhishFakeUrlRule
>>
>> and further the discussion in linked bug:
>>
>> https://bz.apache.org/SpamAssassin/show_bug.cgi?id=4255
>
> I suspect Nick is still using and referring to mailscanner (which is/was
> written in perl), it has/had this ability, I (like a good few of the names
> around here) used it back in the day as well, until it became clear it was
> abandonware, and did not like certain newer versions of perl causing exits
> after each scan, mind you, I did dump it for amavisd back around 2008/9/10,
> that said I liked that function, and rarely noticed any FP's, my memorys
> hazy, but IIRC, it disarmed the links, rather than take any scoring action...
> I might be wrong though, like I said, its been along time.
>
> --
>
> Kind Regards,
>
> Noel Butler
>
> This Email, including any attachments, may contain legally privileged
> information, therefore remains confidential and subject to copyright
> protected under international law. You may not disseminate, discuss, or
> reveal, any part, to anyone, without the authors express written authority to
> do so. If you are not the intended recipient, please notify the sender then
> delete all copies of this message including attachments, immediately.
> Confidentiality, copyright, and legal privilege are not waived or lost by
> reason of the mistaken delivery of this message. Only PDF [2] and ODF [3]
> documents accepted, please do not send proprietary formatted documents
It was very mature until it broke with later perls, each child would
exit after a scan, as I said this was back some 8/9 years ago, so if its
maintained again by 2018 one would hope those bugs are eliminated, but,
it caused a few grief, and Jules was MIA (yeah I recall him having
health issues) which didnt help those affected by the nasty child exit
bugs, amavisd suits us fine, though I do miss the phishing disarming,
i'm sure one can coddle up some decent SA rules if one wanted to.
--
Kind Regards,
Noel Butler
This Email, including any attachments, may contain legally
privileged
information, therefore remains confidential and subject to copyright
protected under international law. You may not disseminate, discuss, or
reveal, any part, to anyone, without the authors express written
authority to do so. If you are not the intended recipient, please notify
the sender then delete all copies of this message including attachments,
immediately. Confidentiality, copyright, and legal privilege are not
waived or lost by reason of the mistaken delivery of this message. Only
PDF [2] and ODF [3] documents accepted, please do not send proprietary
formatted documents
Links:
------
[1] http://www.mailscanner.info
[2] http://www.adobe.com/
[3] http://en.wikipedia.org/wiki/OpenDocument
