On 26/04/2018 18:12, Matus UHLAR - fantomas wrote:
> On 26.04.18 18:00, Nick Edwards wrote:
>
>> We've been using a separate product to do this, but it struck me, maybe
>> spamassassin can do this easier (or without having to call yet another
>> binary to run as can over mails)
>>
>> Rules that look at URLs in a html message href and src tags, check the "A"
>> tag to see if there is a URL there, and if they do not match, consider it
>> a phis so apply said phis score to the message.
>>
>> Has anyone done this? module even?
>
> the main problem: may non-spam senders do that, see:
>
> https://wiki.apache.org/spamassassin/AntiPhishFakeUrlRule
>
> and further the discussion in linked bug:
>
> https://bz.apache.org/SpamAssassin/show_bug.cgi?id=4255
I suspect Nick is still using and referring to mailscanner (which is/was
written in perl), it has/had this ability, I (like a good few of the
names around here) used it back in the day as well, until it became
clear it was abandonware, and did not like certain newer versions of
perl causing exits after each scan, mind you, I did dump it for amavisd
back around 2008/9/10, that said I liked that function, and rarely
noticed any FP's, my memorys hazy, but IIRC, it disarmed the links,
rather than take any scoring action... I might be wrong though, like I
said, its been along time.
--
Kind Regards,
Noel Butler
This Email, including any attachments, may contain legally
privileged
information, therefore remains confidential and subject to copyright
protected under international law. You may not disseminate, discuss, or
reveal, any part, to anyone, without the authors express written
authority to do so. If you are not the intended recipient, please notify
the sender then delete all copies of this message including attachments,
immediately. Confidentiality, copyright, and legal privilege are not
waived or lost by reason of the mistaken delivery of this message. Only
PDF [1] and ODF [2] documents accepted, please do not send proprietary
formatted documents
Links:
------
[1] http://www.adobe.com/
[2] http://en.wikipedia.org/wiki/OpenDocument
