On Wed, 25 Mar 2026, Jona Müller wrote:
How can I achieve that in 4.0.x?
Take a look at the ruleset 25_replace.cf
https://github.com/apache/spamassassin/blob/trunk/rules/25_replace.cf
SA has a "replace tags" mechanism for essentially tokenizing common RE
"phrases".
we use SA together with amavis and postfix. As a lot of spam and scam
mail has emojis in the subject and more importantly the friendly from we
use custom rules to assign a bit of score to it (a lot of legitimate
mail has emojis these days so there is no emoji => spam causation).
Are you looking for _specific_ emojis? Or just any?
I will take a look at adding an <EMOJI> tag that covers everything, then
you could write a simple subject header rules looking for any emoji, or a
sequence of them.
Targeting *specific* emojis becomes more difficult and may not be worth
the effort, though I do notice certain ones (like the eggplant) appear in
certain types of spam and are unlikely in ham...
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Collectivism: forever just one more execution away from Paradise.
-----------------------------------------------------------------------
528 days since SpaceX caught the SuperHeavy booster on the first try
