Prevent header forgery

[Monis Monther]

Hi Thom,

Found the rule, it seems I already have it, checked its score 0.25, bumped
it up, I can have it any score as to be SPAM or High Score SPAM , we
usually have a policy of deliver spam to user and dovecot sieve stores it
in JUNK.

Can I reject messages based on this RULE, can this be achieved.

Thanks for the great help Thom

On Sun, Sep 2, 2018 at 12:32 PM Thom van der Boon <thom at vdb.nl> wrote:

> Montis,
>
> Out of the "spamassassin 3.4.1" Box it scores a 0.25
>
> You need to write a one line rule to give it a higher score.See the
> spamassassin docs how to do that
>
>
>
> Met vriendelijke groet, Best regards,
>
>
> Thom van der Boon
> E-Mail: thom at vdb.nl
>
>
>
> =====
>
>
>
> Thom.H. van der Boon b.v.
> Transito 4
> 6909 DA  Babberich
> Tel.: +31 (0)88 4272727 <+31884272727>
> Fax: +31 (0)88 4272789
> Home Page: http://www.vdb.nl/
>
> ------------------------------
> *Van: *"Monis Monther" <mmmm82 at gmail.com>
> *Aan: *"MailScanner Discussion" <mailscanner at lists.mailscanner.info>
> *Verzonden: *Zondag 2 september 2018 11:27:50
> *Onderwerp: *Re: Prevent header forgery
>
> Hi Thom,
> Is this a spamassassin config or a RULE, if a rule do you have a link to
> download it.
>
> Thanks
>
> On Sun, Sep 2, 2018 at 12:21 PM Thom van der Boon <thom at vdb.nl> wrote:
>
>> Hi,
>>
>> First you have to upgrade your system to the current versions:
>>
>> Mailscanner 5.1.1-1
>> Spamassassin 3.4.1 (This is the latest (2015), I heard progress is being
>> made on a new version)
>>
>> After that Spamassassin has a HEADER_FROM_DIFFERENT_DOMAINS
>>
>> Met vriendelijke groet, Best regards,
>>
>>
>> Thom van der Boon
>> E-Mail: thom at vdb.nl
>>
>>
>>
>> =====
>>
>>
>>
>> Thom.H. van der Boon b.v.
>> Transito 4
>> 6909 DA  Babberich
>> Tel.: +31 (0)88 4272727 <+31884272727>
>> Fax: +31 (0)88 4272789
>> Home Page: http://www.vdb.nl/
>>
>> ------------------------------
>> *Van: *"Monis Monther" <mmmm82 at gmail.com>
>> *Aan: *"MailScanner Discussion" <mailscanner at lists.mailscanner.info>
>> *Verzonden: *Zondag 2 september 2018 11:08:57
>> *Onderwerp: *Prevent header forgery
>>
>> Hi,
>> Is there a way to prevent users from changing the header. We do not want
>> the envelope to be different than the header. (i.e: header from must match
>> return-path).
>>
>> I am able to achieve all kinds of restrictions in postfix restrictions
>> and restriction classes, but they all apply to the envelope, however when
>> it comes to the header From field, then that is part of the message and the
>> only place to write rules for it is header_checks. I could not find a way
>> in header_checks that can achieve this. It cannot match two different
>> fields and compare them.
>>
>> Am I missing something, Does MailScanner have a way to force this.
>>
>> I am using postfix 2.10.1 and MailScanner 5.0.07 and dovecot 2.2.10
>>
>>
>>
>> --
>> Best Regards
>> Monis
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
> --
> Best Regards
> Monis
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Best Regards
Monis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180902/210b29e5/attachment.html>