It’s not abandonware – Jules handed it off to some other folks that are 
actively putting out new versions.  As a matter of fact one came out not too 
long ago.  MailWatch for MailScanner is also being actively developed still.
Latest/greatest is available at 
www.mailscanner.info<http://www.mailscanner.info> for anyone wanting to check 
it out.

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357

From: Noel Butler [mailto:noel.but...@ausics.net]
Sent: Thursday, April 26, 2018 12:51 PM
To: users@spamassassin.apache.org
Subject: Re: Anti Phish Rules


On 26/04/2018 18:12, Matus UHLAR - fantomas wrote:
On 26.04.18 18:00, Nick Edwards wrote:
We've been using a separate product to do this, but it struck me, maybe
spamassassin can do this easier (or without having to call yet another
binary to run as can over mails)

Rules that look at URLs in a html message  href and src tags, check the "A"
tag to see if there is a URL there, and if they do not match,  consider it
a phis so apply said phis score to the message.

Has anyone done this? module even?

the main problem: may non-spam senders do that, see:

https://wiki.apache.org/spamassassin/AntiPhishFakeUrlRule

and further the discussion in linked bug:

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=4255





I suspect Nick is still using and referring to mailscanner (which is/was 
written in perl), it has/had this ability, I (like a good few of the names 
around here) used it back in the day as well, until it became clear it was 
abandonware, and did not like certain newer versions of perl causing exits 
after each scan, mind you, I did dump it for amavisd back around 2008/9/10, 
that said I liked that function, and rarely noticed any FP's, my memorys hazy, 
but IIRC, it disarmed the links, rather than take any scoring action... I might 
be wrong though, like I said, its been along time.

--

Kind Regards,

Noel Butler
This Email, including any attachments, may contain legally privileged 
information, therefore remains confidential and subject to copyright protected 
under international law. You may not disseminate, discuss, or reveal, any part, 
to anyone, without the authors express written authority to do so. If you are 
not the intended recipient, please notify the sender then delete all copies of 
this message including attachments, immediately. Confidentiality, copyright, 
and legal privilege are not waived or lost by reason of the mistaken delivery 
of this message. Only PDF<http://www.adobe.com/> and 
ODF<http://en.wikipedia.org/wiki/OpenDocument> documents accepted, please do 
not send proprietary formatted documents


Reply via email to