User Tools

Site Tools


internet:mail:mailcleaner_customize

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
internet:mail:mailcleaner_customize [2023/01/27 09:07]
gcooper
internet:mail:mailcleaner_customize [2024/01/09 09:12] (current)
gcooper
Line 60: Line 60:
   * ''login.css''   * ''login.css''
   * ''navigation.css''   * ''navigation.css''
 +
 +===== Freemail Domains =====
 +
 +It's probably best to blacklist them.
  
 ===== SpamC Score ===== ===== SpamC Score =====
Line 88: Line 92:
  
 ===== Customize SpamAssassin ===== ===== Customize SpamAssassin =====
 +
 +<note tip>Copy customized rules to Mailcleaner cluster members.</note>
  
 <note tip>Using the MailCleaner Admin web interface, **restart the Filtering Engine service** after making rule modifications. <note tip>Using the MailCleaner Admin web interface, **restart the Filtering Engine service** after making rule modifications.
 </note> </note>
 +
 <file> <file>
 vim /usr/mailcleaner/share/spamassassin/99_custom_rules_scores.cf vim /usr/mailcleaner/share/spamassassin/99_custom_rules_scores.cf
Line 121: Line 128:
 score    ARC_SIGNED      0.001 score    ARC_SIGNED      0.001
 score    KHOP_BIG_TO_CC  2.0 score    KHOP_BIG_TO_CC  2.0
 +score    RCVD_IN_UCEPROTECT3  1.0
  
 score    FREEMAIL_FROM   3.5 score    FREEMAIL_FROM   3.5
Line 145: Line 153:
 score     EMPTY_SUBJECT 1.5 score     EMPTY_SUBJECT 1.5
 describe  EMPTY_SUBJECT Subject header exists but is empty describe  EMPTY_SUBJECT Subject header exists but is empty
-</file> 
- 
-FIXME Testing this due to more freemail spam: 
- 
-<file> 
-freemail_domains sharepointonline.com geeks-squadhub23.co 
- 
-score    KHOP_BIG_TO_CC  2.0 
- 
-score    FREEMAIL_FROM 3.5 
-score    FREEMAIL_ENVFROM_END_DIGIT  1.0 
-score    FREEMAIL_REPLYTO_END_DIGIT  1.0 
-score    FREEMAIL_FORGED_REPLYTO 3.5 
-score    FREEMAIL_REPLYTO 3.5 
-score    FREEMAIL_REPLY  3.5 
- 
-score    MC_MANY_FREEMAIL_RCPT  3.5 
- 
-rawbody   GOOGLE_APIS   /https?:\/\/storage\.googleapis\.com/i 
-score     GOOGLE_APIS   3.0 
-describe  GOOGLE_APIS   Has a hyperlink that points to Google APIs 
- 
-header    DOMAIN_NUM    From =~ /\@.*\d.*\d.*/ 
-score     DOMAIN_NUM    2.0 
-describe  DOMAIN_NUM    Domain name has 2 or more numbers 
- 
-header    LONG_SUBJECT  Subject =~ /.{120,}/ 
-score     LONG_SUBJECT  2.0 
-describe  LONG_SUBJECT  Subject line is very long 
  
 +header    ONMICROSOFT_FROM From =~ /onmicrosoft\.com/i
 +score     ONMICROSOFT_FROM 3.0
 +describe  ONMICROSOFT_FROM From header contains onmicrosoft.com domain
 </file> </file>
- 
internet/mail/mailcleaner_customize.1674835643.txt.gz · Last modified: 2023/01/27 09:07 by gcooper