MailScanner content scanning for keywords

[Martin Hepworth]

Daniel Straka wrote:
> Julian, and list,
> 
> I know you're all getting tired of my postings so I'll make this my last 
> intrusion on this topic.
> 
> I don't want to offend anyone on this list, but the comments sent back 
> about my suggestion (see bottom) are a bit programmer-anal. How 
> about just keeping it simple? A nice simple line file delimited by quotes 
> or whatever character, like:
> 
> " viagra "
> " vagara "
> " cialis "
> "sweeter tasting sperm" (this one offended many, damn spammers)
> " cum "
> " porn "
> " ejaculation "
> " orgasms "
> 
> This is the kind of content that gets through to my users. None of this 
> needs to arrive in a mailbox. I don't really care about assigning a 
> "score" to spam like SpamAssassin does, I want to delete messages 
> that contian words or phrases like this. These aren't going to match 
> any other words or phrases since they have spaces before and after 
> single words and it's simple. Mail admins don't have to write a line of 
> "code" to enable a keyword rule.
> How about the email with a spoofed Reply-to field that 
> spam.blacklist.rules can't touch...but...the from address is the one we 
> really need to be blacklisting? This would work great!
> 
> Thanks everybody!,
> 
> Dan
> Julian, 
> 
> Since you already have an option to scan the messages for potentially
> dangerous content, I think it would be very useful to have an option to
> scan the messages for offensive text based on a file which contains a 
> list of offensive words and the message deleted if found. I understand 
> it would not have the scoring capabilities that SA has, but honestly, any 
> email arriving here with the word viagra in it would never be missed! 
> Could this be a future enhancement?
> 
> 
> Dan Straka
> Academic Systems Specialist
> Casper College
> (307) 268-2399
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
Dan

Nice generator for obsfucated words here..

http://sandgnat.com/cmos/cmos.jsp

Type in you word and paste the SA rule that's generated into a file in 
/etc/mail/spamassassain.

-- 
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!