Re: Matching on X-Spam headers doesn't get a hit

2021-07-23 Thread Martin Flygenring
Yea, it was more meant as a "we don't use postfix specifically". My fallback idea was also to do the filtering on the MTA we do use, instead of in SpamAssassin. That was just bad phrasing on my part. Sorry about that :) On 23/07/2021 16.51, jahli...@gmx.ch wrote: Martin, most MTA should ha

Re: Matching on X-Spam headers doesn't get a hit

2021-07-23 Thread jahlives
Martin, most MTA should have some filter capabilities. Maybe not all MTA have same powerful and efficient ways to perform such checks as postfix has ;-) iirc something like this should work for exim acl_smtp_data = check_message check_message:   deny message = 'Outscatter detected'   regex = ^X-S

Re: Matching on X-Spam headers doesn't get a hit

2021-07-23 Thread Martin Flygenring
We don't run Postfix here, but we can probably look for it elsewhere in our stack instead. Thanks to everyone that answered :) On 23/07/2021 10.43, Laurent S. wrote: Hi, I know we are on the spamassassin mailing list, but another more radical way to block those is directly in postfix with a

Re: Matching on X-Spam headers doesn't get a hit

2021-07-23 Thread Laurent S.
Hi, I know we are on the spamassassin mailing list, but another more radical way to block those is directly in postfix with a header_check before giving it to spamassassin /^X-Spam-Flag: Yes/ REJECT Outscatter /^X-(Spam|AES)-Category: (SPAM|PHISHING)/ REJECT Outscatter But as a forewarning, th

Re: Matching on X-Spam headers doesn't get a hit

2021-07-22 Thread RW
On Thu, 22 Jul 2021 20:09:19 +0300 Henrik K wrote: > On Thu, Jul 22, 2021 at 08:06:15PM +0300, Henrik K wrote: > > On Thu, Jul 22, 2021 at 05:15:54PM +0200, Martin Flygenring wrote: > > > > > > Is there a limitation to SpamAssassin so it doesn't accept > > > looking for the two X-Spam-headers, o

Re: Matching on X-Spam headers doesn't get a hit

2021-07-22 Thread Henrik K
On Thu, Jul 22, 2021 at 08:06:15PM +0300, Henrik K wrote: > On Thu, Jul 22, 2021 at 05:15:54PM +0200, Martin Flygenring wrote: > > > > Is there a limitation to SpamAssassin so it doesn't accept looking for the > > two X-Spam-headers, or can you spot why this rule isn't matching? > > SA removes all

Re: Matching on X-Spam headers doesn't get a hit

2021-07-22 Thread Henrik K
On Thu, Jul 22, 2021 at 05:15:54PM +0200, Martin Flygenring wrote: > > Is there a limitation to SpamAssassin so it doesn't accept looking for the > two X-Spam-headers, or can you spot why this rule isn't matching? SA removes all X-Spam-* headers from the message, it's not possible to match on them

Re: Matching on X-Spam headers doesn't get a hit

2021-07-22 Thread Jared Hall
Martin Flygenring wrote: Hi. I'm trying to write a rule that matches on a mail that has the following headers: X-Spam-Reasons: {'verdict': 'phishing',  'spamcause': 'gggruggvucftvghtrhhoucdtuddrgedvtddruddvgddugecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfkpffvgfftoffgfffktedpqfgfvfenuceurgh

Matching on X-Spam headers doesn't get a hit

2021-07-22 Thread Martin Flygenring
Hi. I'm trying to write a rule that matches on a mail that has the following headers: X-Spam-Reasons: {'verdict': 'phishing',  'spamcause': 'gggruggvucftvghtrhhoucdtuddrgedvtddruddvgddugecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfkpffvgfftoffgfffktedpqfgfvfenuceurghilhhouhhtmecufedttdenucgor