On 2023-10-27 at 10:56:36 UTC-0400 (Fri, 27 Oct 2023 14:56:36 +0000)
DEMBLANS Mathieu <demblan...@mipih.fr>
is rumored to have said:
Hi,
Anyone know if there is a way to request an external API throught a
spamsassassin plugin ?
There is no existing SA plugin which implements an interface to any
generic web API (such as REST endpoints) but there's no reason one could
not write a plugin to access such external APIs. Spamhaus has done this,
for example. Also see SpamAssassin::Plugin::URIDNSBL, which implements a
process for using the DNSBL mechanism with URIs, as is used by multiple
blocklist providers.
It will be to search an URL extracted by SA from a body of a mail and
check if it's referenced with an API request on an external service
(virustotal or other).
Look at how the various URIBL* rules and SpamAssassin::Plugin::URIDNSBL
work.
We receive some mails with URL inside whose page contains malware.
One day, a user will click on it...
If I can junk it before, it would be great.
The current URIBL* rules may be helpful, if you are able to use them. If
you use other people's open DNS resolvers, that can take a small amount
of work, to stand up your own autonomous caching resolver.
If you need a web API backend rather than a DNSBL, you would need to
write that plugin specifically for that backend.
We do accept feature requests in the Bugzilla, but at this point we do
not have a list of developers waiting to take on the feature request
list, so if you really need it, you'd need to create it yourself.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
