I am trying to add a disclaimer to incoming emails that have a detected "spam URL" in the message body. Is it possible to use macros in the Match Field option in What Objects?
This is what Im trying:
Rule:
Action: URIBL_DBL_SPAM
What: Spam URL
Priority: 75
Action: URIBL_DBL_SPAM
Add disclaimer: SpamAssassin Rule: The mail body contains a URI containing a domain that has
matched an entry on the DNSBL Spamhaus Domain Block List (DBL).....
What: Spam URL
Field: __SPAM_INFO__
Value: URIBL_DBL_SPAM
I have also tried using this for the What Object
What: Spam URL
Field: X-SPAM-LEVEL
Value: URIBL_DBL_SPAM
From mail.log when sending my test message:
From the header of my test message on my mail server:
I think what I want to do is possible with PMG. Im not sure what Im doing wrong.
This is what Im trying:
Rule:
Action: URIBL_DBL_SPAM
What: Spam URL
Priority: 75
Action: URIBL_DBL_SPAM
Add disclaimer: SpamAssassin Rule: The mail body contains a URI containing a domain that has
matched an entry on the DNSBL Spamhaus Domain Block List (DBL).....
What: Spam URL
Field: __SPAM_INFO__
Value: URIBL_DBL_SPAM
I have also tried using this for the What Object
What: Spam URL
Field: X-SPAM-LEVEL
Value: URIBL_DBL_SPAM
From mail.log when sending my test message:
Code:
Jan 16 12:50:30 pmg pmg-smtp-filter[2007]: 40BBE5C3F9911BFD60: SA score=2/5 time=4.337 bayes=undefined autolearn=no autolearn_force=no hits=AWL,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,HTML_MESSAGE,KAM_NUMSUBJECT,RCVD_IN_DNSWL_NONE,SPF_PASS,URIBL_DBL_SPAMFrom the header of my test message on my mail server:
Code:
X-SPAM-LEVEL: Spam detection results: 2
AWL -0.250 Adjusted score from AWL reputation of From: address
DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid
DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain
DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain
FREEMAIL_ENVFROM_END_DIGIT 0.25 Envelope-from freemail username ends in digit (gmail)
FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider (gmail)
HTML_MESSAGE 0.001 HTML included in message
KAM_NUMSUBJECT 0.5 Subject ends in numbers excluding current years
RCVD_IN_DNSWL_NONE -0.0001 Sender listed at, no trust
SPF_PASS -0.001 SPF: sender matches SPF record
URIBL_DBL_SPAM 2.5 Contains a spam URL listed in the Spamhaus DBL blocklistI think what I want to do is possible with PMG. Im not sure what Im doing wrong.