User Tools

Site Tools


internet:mail:mailcleaner_customize

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Last revision Both sides next revision
internet:mail:mailcleaner_customize [2022/08/15 09:51]
gcooper
internet:mail:mailcleaner_customize [2023/09/01 10:09]
gcooper
Line 60: Line 60:
   * ''login.css''   * ''login.css''
   * ''navigation.css''   * ''navigation.css''
 +
 +===== Freemail Domains =====
 +
 +It's probably best to blacklist them.
  
 ===== SpamC Score ===== ===== SpamC Score =====
Line 88: Line 92:
  
 ===== Customize SpamAssassin ===== ===== Customize SpamAssassin =====
 +
 +<note tip>Copy customized rules to Mailcleaner cluster members.</note>
 +
 +<note tip>Using the MailCleaner Admin web interface, **restart the Filtering Engine service** after making rule modifications.
 +</note>
  
 <file> <file>
Line 102: Line 111:
  
 /usr/mailcleaner/share/spamassassin/99_custom_rules_sharepointonline.cf /usr/mailcleaner/share/spamassassin/99_custom_rules_sharepointonline.cf
 +
 +FIXME I added sharepointonline.com as a freemail domain and added many points, so I changed this score to zero.
  
 <file> <file>
Line 112: Line 123:
  
 /usr/mailcleaner/share/spamassassin/99_custom_rules_scores.cf /usr/mailcleaner/share/spamassassin/99_custom_rules_scores.cf
- 
-FIXME This worked pretty well, but getting more freemail spam all the time. 
  
 <file> <file>
-freemail_domains sharepointonline.com +score    DCC_CHECK       1.5 
 +score    ARC_SIGNED      0.001
 score    KHOP_BIG_TO_CC  2.0 score    KHOP_BIG_TO_CC  2.0
  
-score    FREEMAIL_FROM 2.0 +score    FREEMAIL_FROM   3.5
-score    FREEMAIL_ENVFROM_END_DIGIT  0.25 +
-score    FREEMAIL_REPLYTO_END_DIGIT  0.25 +
-score    FREEMAIL_FORGED_REPLYTO 3.0 +
-score    FREEMAIL_REPLYTO 2.5 +
-score    FREEMAIL_REPLY  1.0 +
- +
-score    MC_MANY_FREEMAIL_RCPT  2.5 +
- +
-rawbody   GOOGLE_APIS   /https?:\/\/storage\.googleapis\.com/+
-score     GOOGLE_APIS   1.5 +
-describe  GOOGLE_APIS   Has a hyperlink that points to Google APIs +
- +
-header    DOMAIN_NUM    From =~ /\@[\w+=\.]*\d{2,}[\w+=\.]*/ +
-score     DOMAIN_NUM    1.0 +
-describe  DOMAIN_NUM    Domain name has 2 or more numbers +
- +
-header    LONG_SUBJECT  Subject =~ /.{120,}/ +
-score     LONG_SUBJECT  1.0 +
-describe  LONG_SUBJECT  Subject line is very long +
-</file> +
- +
-FIXME Testing this due to more freemail spam: +
- +
-<file> +
-freemail_domains sharepointonline.com +
- +
-score    KHOP_BIG_TO_CC  3.0 +
- +
-score    FREEMAIL_FROM 3.5+
 score    FREEMAIL_ENVFROM_END_DIGIT  1.0 score    FREEMAIL_ENVFROM_END_DIGIT  1.0
 score    FREEMAIL_REPLYTO_END_DIGIT  1.0 score    FREEMAIL_REPLYTO_END_DIGIT  1.0
-score    FREEMAIL_FORGED_REPLYTO 3.5 +score    FREEMAIL_FORGED_REPLYTO  3.5 
-score    FREEMAIL_REPLYTO 3.5+score    FREEMAIL_REPLYTO  3.5
 score    FREEMAIL_REPLY  3.5 score    FREEMAIL_REPLY  3.5
- 
 score    MC_MANY_FREEMAIL_RCPT  3.5 score    MC_MANY_FREEMAIL_RCPT  3.5
  
Line 162: Line 141:
 describe  GOOGLE_APIS   Has a hyperlink that points to Google APIs describe  GOOGLE_APIS   Has a hyperlink that points to Google APIs
  
-header    DOMAIN_NUM    From =~ /\@[\w+=\.]*\d{2,}[\w+=\.]*/+header    DOMAIN_NUM    From =~ /\@.*\d.*\d.*/
 score     DOMAIN_NUM    2.0 score     DOMAIN_NUM    2.0
 describe  DOMAIN_NUM    Domain name has 2 or more numbers describe  DOMAIN_NUM    Domain name has 2 or more numbers
Line 169: Line 148:
 score     LONG_SUBJECT  2.0 score     LONG_SUBJECT  2.0
 describe  LONG_SUBJECT  Subject line is very long describe  LONG_SUBJECT  Subject line is very long
 +
 +header    EMPTY_SUBJECT Subject =~ /^$/
 +score     EMPTY_SUBJECT 1.5
 +describe  EMPTY_SUBJECT Subject header exists but is empty
 </file> </file>
  
 +==== 99_custom_rules_keywords.cf ====
 +
 +<file>
 +header   __SPAMMY_SUBJECT_KEYWORDS Subject =~ /web design|website|web site|hiring|application developement|renewal|mobile|app|Geek Squad|Storage Notification App|divorced|4fun|termination|voip|reviews|SEO|AARP/is
 +body     __SPAMMY_BODY_KEYWORDS /web design|website|web site|hiring|application developement|renewal|india|mobile|app|Geek Squad|Storage Notification App|divorced|4fun|termination|voip|reviews|SEO|AARP/is
 +meta     SPAMMY_KEYWORDS __SPAMMY_SUBJECT_KEYWORDS || __SPAMMY_BODY_KEYWORDS
 +score    SPAMMY_KEYWORDS 1.6
 +describe SPAMMY_KEYWORDS Add points to messages with spammy keywords
 +</file>
internet/mail/mailcleaner_customize.txt · Last modified: 2024/01/09 09:12 by gcooper