[Mimedefang] filter for header line
Benoit Panizzon
benoit.panizzon at imp.ch
Wed Sep 6 09:40:50 EDT 2017
Hi
> I am curious. Why not just add a rule
> to /etc/mail/spamassassin/local.cf to match the desired header. Are
> you not using SpamAssassin?
There is a lot of other helpful things stuff you can do with mimedefang.
Just a few ideas:
* Rewrite sender in an SRS compatible way.
* Handle forwarding in an SPF compatible way and detect loops.
* Throttle emails to prevent sending too much spam in case a user got
himself phished
* Detect phished accounts (many different IP's pro hour logging in).
* Compute MD5 or SHA1 Hashes of attachments and compare to Malware
database (not so useful anymore with polymorphic malware which
generated a different checksum on every specimen)
and so on.
And maybe you want to recognize if an email already passed a mailserver
under your control. So you check for the value of a specific header and
if not present, you add that header, which contains for example a MD5
sum of the MSGID signed with a password you know to prevent others
injecting such emails to your system.
--
-Benoît Panizzon-
--
I m p r o W a r e A G - Leiter Commerce Kunden
______________________________________________________
Zurlindenstrasse 29 Tel +41 61 826 93 00
CH-4133 Pratteln Fax +41 61 826 93 01
Schweiz Web http://www.imp.ch
______________________________________________________
More information about the MIMEDefang
mailing list