[Mimedefang] filter for header line

Benoit Panizzon benoit.panizzon at imp.ch
Wed Sep 6 09:40:50 EDT 2017


Hi

> I am curious. Why not just add a rule
> to /etc/mail/spamassassin/local.cf to match the desired header. Are
> you not using SpamAssassin?

There is a lot of other helpful things stuff you can do with mimedefang.
Just a few ideas:

* Rewrite sender in an SRS compatible way.
* Handle forwarding in an SPF compatible way and detect loops.
* Throttle emails to prevent sending too much spam in case a user got
  himself phished
* Detect phished accounts (many different IP's pro hour logging in).
* Compute MD5 or SHA1 Hashes of attachments and compare to Malware
  database (not so useful anymore with polymorphic malware which
  generated a different checksum on every specimen)

and so on.

And maybe you want to recognize if an email already passed a mailserver
under your control. So you check for the value of a specific header and
if not present, you add that header, which contains for example a MD5
sum of the MSGID signed with a password you know to prevent others
injecting such emails to your system.

-- 
-Benoît Panizzon-
-- 
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web  http://www.imp.ch
______________________________________________________




More information about the MIMEDefang mailing list