You might want to look at the KAM ruleset and look at the ZW rules as
well. -KAM
On 2/21/2025 5:41 PM, Michel Arboi wrote:
I received this phishing spam yesterday. That was not the first of
this kind. (attached, w/o the image)
I thought about this and wrote this uri-bad-unicode.cf Insert it
in your local.cf or in /etc/spammassin, adjust the scores and restart
spamd. Comments welcome.
I am pretty sure there are more nasty Unicode characters. Also we should
make sure that Unicode is properly normalized. See RFC 8264 and
Unicode::Precis::Preparation on CPAN.
--
Kevin A. McGrail
kmcgr...@apache.org
Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171
