Re: Keyword based custom subject warning
Matus UHLAR - fantomas <[email protected]>
| Newsgroups | gmane.mail.virus.amavis.user |
|---|---|
| Message-ID | <[email protected]> |
>* Danilo Godec <[email protected]>: >> apparently, our users are receiving emails containing links and /or >> references to various publications, some of which are considered >> 'predatory'. Emails usually contain ISSN (International Standard Serial >> Number) and the idea is to scan the body of an email for the ISSN and if it >> matches one on the 'blacklist', the subject of the email should be prepended >> with some specific warning (other than ***SPAM***). >> >> We're already using Amavisd-new on our inbound SMTP server, so I wonder if >> that would be possible with it? On 07.03.22 11:49, Patrick Ben Koetter wrote: >it is not possible as of now. Your best guess is probably to look for other >MILTER applications that let you scan a messages body and trigger an action, >such as changing the Subject:-header. I was tinking if this could be solved using clamav with YARA rule that would detect such ISSN and report it, probably with virus_name_to_spam_score_maps ? -- Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. "One World. One Web. One Program." - Microsoft promotional advertisement "Ein Volk, ein Reich, ein Fuhrer!" - Adolf Hitler