Update to 2021-12-01 19:13

This commit is contained in:
Daniel Berteaud
2021-12-01 19:13:34 +01:00
commit 4c4556c660
2153 changed files with 60999 additions and 0 deletions

View File

@@ -0,0 +1,2 @@
# Bayes autolearn never gave any interesting results
bayes_auto_learn 0

View File

@@ -0,0 +1,36 @@
# skip messages with one or more of these headers
fns_ignore_headers List-Id List-Post Mailing-List X-Forwarded-For
# Does the From:name look like an email address
header __PLUGIN_FROMNAME_EMAIL eval:check_fromname_contains_email()
# Is the From:name differen to the from header
header __PLUGIN_FROMNAME_DIFFERENT eval:check_fromname_different()
# From:name owners differ
header __PLUGIN_FROMNAME_OWNERS_DIFFER eval:check_fromname_owners_differ()
# From:name domain differs to from header
header __PLUGIN_FROMNAME_DOMAIN_DIFFER eval:check_fromname_domain_differ()
# From:name and From:address don't match and owners differ
header __PLUGIN_FROMNAME_SPOOF eval:check_fromname_spoof()
# From:name address matches To:address
header __PLUGIN_FROMNAME_EQUALS_TO eval:check_fromname_equals_to()
meta FROMNAME_SPOOF (__PLUGIN_FROMNAME_SPOOF)
describe FROMNAME_SPOOF From:name doesn't match From:address
score FROMNAME_SPOOF 1
meta FROMNAME_SPOOF_EQUALS_TO (FROMNAME_SPOOF && __PLUGIN_FROMNAME_EQUALS_TO)
describe FROMNAME_SPOOF_EQUALS_TO From:name is spoof to look like To: address
score FROMNAME_SPOOF_EQUALS_TO 1
meta FROMNAME_EQUALS_TO (!FROMNAME_SPOOF && __PLUGIN_FROMNAME_EQUALS_TO)
describe FROMNAME_EQUALS_TO From:name matches To: address
score FROMNAME_EQUALS_TO 0.01
meta FROMNAME_SPOOF_FREEMAIL (FREEMAIL_FROM && FROMNAME_SPOOF)
describe FROMNAME_SPOOF_FREEMAIL From:name spoof and Freemail From:address
score FROMNAME_SPOOF_FREEMAIL 2.0

View File

@@ -0,0 +1 @@
loadplugin Mail::SpamAssassin::Plugin::FromNameSpoof

View File

@@ -0,0 +1,3 @@
header HASHBL_EMAIL eval:check_hashbl_emails('ebl.msbl.org')
describe HASHBL_EMAIL Message contains email address found on EBL
score HASHBL_EMAIL 2.5

View File

@@ -0,0 +1 @@
loadplugin Mail::SpamAssassin::Plugin::HashBL

View File

@@ -0,0 +1,7 @@
{% if pmg_use_openphish %}
phishing_openphish_feed /etc/mail/spamassassin/openphish.txt
{% endif %}
phishing_phishtank_feed /var/lib/spamassassin/phishtank.txt
body URI_PHISHING eval:check_phishing()
describe URI_PHISHING Url match phishing in feed
score URI_PHISHING 3

View File

@@ -0,0 +1 @@
loadplugin Mail::SpamAssassin::Plugin::Phishing