Uploaded image for project: 'Comdev GSOC'
  1. Comdev GSOC
  2. GSOC-9

GSOC 2018 SpamAssassin Improve Headers for RBL research

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved

    Description

      add subtests to headers for SA for logging / research purposes

      parse out URIs from $report URIDOMAINS(,) list

      add_header all Status YESNO, score=SCORE required=REQD tests=TESTS subtests=SUBTESTS autolearn=AUTOLEARN version=VERSION

      logic such as a tflag describe an RBL and then have rbls=RBLS.  So every rbl test for PCCC will have a tflag that gives it a name like PCCC even if I have 20 tests.  Same for URIBL or SURBL or SpamHause.  So the rbls=PCCC,SURBL,URIBL as an overarching hit about which RBL hit.

      With this we can better identify overlap of RBLs.

      Also, it appears that URIDOMAINS(,)_ is not being interpolated in report body. 

       

      Apache SpamAssassin is a mail filter to identify spam. It is an intelligent email filter which uses a diverse range of tests to identify unsolicited bulk email, more commonly known as Spam. These tests are applied to email headers and content to classify email using advanced statistical methods.

      In addition, SpamAssassin has a modular architecture that allows other technologies to be quickly wielded against spam and is designed for easy integration into virtually any email system.

      It is primarily written in Perl with a few bits in C and shell scripts for system integration.

      The compendium at https://raptor.pccc.com/raptor.cgim?template=email_spam_compendium is helpful to understand some of the concepts with SpamAssassin

      It will be helpful for a student in this project to understand SMTP but a willingness to learn and setup your own mail server on a Linux Distribution with SpamAssassin for a personal test domain will be very desired with assistance provided to get the basic framework for a sandbox for learning.

      As email becomes more commodotized by major providers, knowledge of email systems and their security is dwindling.  This opportunity can provide real-world experience with an email security product that is employed by countless commercial systems in the world.

      Attachments

        Activity

          People

            Unassigned Unassigned
            kmcgrail Kevin A. McGrail
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: