Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Register
  • Sign in
  • I ISPConfig 3
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 590
    • Issues 590
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 49
    • Merge requests 49
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • ISPConfig
  • ISPConfig 3
  • Issues
  • #5596
Closed
Open
Issue created Apr 22, 2020 by Daniele De Lorenzi@Dark-Vex

Add support for Spamassassin phishing and EBL module

Starting from version 3.4.2 of Spamassassin there are two new useful modules: phishing (using OpenPhish or PhishTank) and HashBL/EBL (Email Blocklist) modules. On a Debian 10 installation I have successful enabled the phishing module with both phish repositories by adding in /etc/spamassassin/local.cf

ifplugin Mail::SpamAssassin::Plugin::Phishing
  phishing_openphish_feed /etc/mail/spamassassin/openphish-feed.txt
  phishing_phishtank_feed /etc/mail/spamassassin/phishtank-feed.csv
  body     URI_PHISHING      eval:check_phishing()
  describe URI_PHISHING      Url match phishing in feed
endif

I have then added a cron that runs hourly for updates the signatures

#!/bin/bash
curl -L https://openphish.com/feed.txt -z /etc/mail/spamassassin/openphish-feed.txt -o /etc/mail/spamassassin/openphish-feed.txt &> /dev/null
curl -L http://data.phishtank.com/data/online-valid.csv -z /etc/mail/spamassassin/phishtank-feed.csv -o /etc/mail/spamassassin/phishtank-feed.csv &> /dev/null

Would be nice to have these features in the next ISPConfig release

Assignee
Assign to
Time tracking