Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Same kind of cleanup for Commtouch

...

Please add links to third-party SA plugins hereto the bottom of this page. Note that only SpamAssassin 3.0.0 or later can use these. To use these, just place the file(s) in /etc/mail/spamassassin (if you use spamd, be sure to restart); SpamAssassin will need at least 1 rule file (ending in .cf) to load the plugin, and that will typically use a loadplugin line to load a .pm file containing the plugin's perl code.

...

  1. Read any extra info available with the plugins, including the comments in the .cf files, or the POD documentation in the .pm file. 2.
  2. Check to make sure that the default scores fit your installation. You might want to modify scores. 3.
  3. Make sure to --lint the rules after loading them.
  4. 4. Test the new plugin. Keep an eye on hits from the new rules to determine if the scoring is right for you.

...

Active: Plugin is actively updated and maintained BR
Locked: Plugin is not actively updated, but is fine to run and considered "stable" BR
Defunct: Plugin is no longer maintained, may be out of date or have problems BR BR

Please respect the wishes of the authors and/or the site hosts.

The Plugins

...

Commtouch Plug-in SNF4SA - Message SnifferTM Antispam Plugin for SpamAssassinBR The Commtouch Plug-In is a quick, easy way to inoculate SpamAssassinprotected mail servers against zero-hour threats, and to beef up detection against zombie or botnet-generated spam.BR Created by: Commtouch Software Ltd. BR Contact: Amir.Harel at Commtouch dot com BR License Type: Commercial annual subscriptionBR Status: Active BR
The Message Sniffer Antispam Plugin for SpamAssassin combines a real-time collaborative IP reputation system, distributed competitive machine learning technologies, and a comprehensive content analysis engine that improves both the accuracy and speed of SpamAssassin without additional tuning.
Created by: ARM Research Labs, LLC
Contact: http://www.armresearch.com/company/contactUs.jsp
License Type: Commercial Subscription
Status: Active
Updated: Old
Available at: http://www.commtoucharmresearch.com/Siteproducts/Products/SpamAssassin.asp BRCloudmark Authority BR 8 different fingerprinting algorithms for spam, phishing, and virus. Authority offers significant performance and accuracy improvements with automatic rules and configuration updates every minute. Brought to you by the makers of Razor. BR Created by: Cloudmark BR Contact: satrial at cloudmark dot SNF4SA.jsp

...

com BR License Type: Commercial annual subscription BR Status: active BR Available at: http://www.cloudmarkwombatsecurity.com/spamassassin BR Note: Razor plug-in with local signature cache BRstatic/Wombat_sa.png

PhishPatrolTM by Wombat Security Technologies, Inc.

PhishPatrolTM is an email filter from Wombat Security Technologies designed specifically to identify email-based phishing attacks before they can lure users into divulging personal information. In contrast to solutions that rely solely on blacklists and email signatures, the PhishPatrolTM email filter uses advanced machine learning to catch new phishing attacks from the very start. Extensive evaluation of PhishPatrolTM has shown that it consistently catches more phish than the best email spam filters and has far fewer false positives. As a SpamAssassin plug-in, PhishPatrolTM integrates seamlessly with your existing installation of SpamAssassin. PhishPatrolTM — Powerful phishing detection from the makers of PhishGuru and Anti-Phishing Phil.

Created by: Wombat Security Technologies, Inc.

Contact: sales at wombatsecurity dot com

License type: Commercial annual subscription

Status: Active

Updated: Old

PDFassassin BR A plugin which scans PDF attachments, exports text from PDF files and uses OCR to extract image spam embeded in PDF files. Helpful to catch Spam messages been sent as PDF files, uses the gocr and pdftotext utilities as a dependency BR Created by: Ben Duncan BR Contact: info at calacode dot com BR License Type: Same as SpamAssassinBR Status: active BR Available at: http://blogwombatsecurity.atmail.com/?p=61 BR Note: First release, proof of conceptBR

DumpText BR A demo plugin that simply dumps the rendered text to stderr. BR Created by: Justin Mason BR Contact: jm at jmason dot org BR License Type: public domain (it's tiny!) BR Status: active BR Available at: DumpTextPlugin BR

Wiki Markup
*ClamAV* [BR] This plugin submits the entire email to a locally running \[http://www.clamav.net/ Clam AntiVirus\] server for virus detection. [BR] Created by: Troels Walsted Hansen [BR] Contact: troels -at- thule -dot- no [BR] License Type: Public Domain [BR] Status: Active [BR] Available at: Self:ClamAVPlugin [BR] Note: Requires the \[http://search.cpan.org/~cfaber/File-Scan-ClamAV/lib/File/Scan/ClamAV.pm File::Scan::ClamAV\] perl module. [BR]

WrongMX BR A plugin that determines if an email was sent to a lower preference MX when a higher preference MX was probably available. BR Created by: Daryl C. W. O'Shea BR Contact: spamassassin at dostech dot ca BR License Type: public domain BR Status: active BR Available at: Self:WrongMXPlugin BR

AuthzUser BR A example plugin using the services_allowed_for_username hook (available in 3.1 dev tree) that determines if a username is authorized to use a particular service. BR Created by: Michael Parker BR Contact: parkerm at pobox dot com BR License Type: public domain BR Status: active BR Available at: Self:AuthzUserPlugin BR

ReplaceTags BR A plugin to create character classes, which can be used in your rules to increases the chance of matching. BR Created by: Felix Bauer BR Contact: dev - at - doph dot com BR License Type: Public Domain BR Status: active BR Available at: Self:ReplaceTags BR Note: Please read the POD

PublicCheckTo BR A plugin that tests for email sent to public addresses, (such as mailing lists) it can optionally allow "If the email is to this address, its probably spam UNLESS it is a reply." It does this by checking the In-Reply-To header against known message IDs.BR Created by: Jamie HoglundBR Contact: http://www.geniegate.com/contact.php BR License Type: Free BR Status: beta BR Available at: http://geniegate.com/other/spamref/index.php BR Note: For the In-Reply-To to work, it needs a storage implementation. (Included are SQL and flat file)

CustomLearner BR This plugin implements a different bayes learning algorithm: every message marked as spam is learned as spam and every other message is learned as ham.BR Please read the source and http://bugzilla.spamassassin.org/show_bug.cgi?id=2094 for details.BR Created by: Nikolaus RathBR Contact: Nikolaus@rath.org BR License Type: Same as SpamAssassin itself BR Status: Quick hack BR Available at: http://bugzilla.spamassassin.org/show_bug.cgi?id=2094 BR Note: This plugin should really use the new plugin interface. I intend to implement it as soon as SA 3.1.0 is ready.BR

!UIUC BR Mail::SpamAssassin::UIUC is a project to connecting the CITES Spam Control (CSC) project, which runs on all mails sent to @uiuc.edu addreses (plus internal CITES mail servers like express.cites.uiuc.edu), and SpamAssassin, which is used at many smaller sites for all incoming mail. The goals were to a) make sure that the work from CITES' servers is not removed by SpamAssassin and b) hopefully use the information received from those servers as well.BR Created by: Tim Skirvin BR Contact: tskirvin@ks.uiuc.edu BR License Type: Same as SpamAssassin BR Status: It works, and will probably be maintained to match the campus setup. BR Available at: http://www.ks.uiuc.edu/Development/MDTools/spamassassin-uiuc/ BR Note: This distribution is actually released as a full patch to SpamAssassin, for ease of use by the UIUC community. More information on modified files is available at the main website.

Mail::SpamAssassin::Plugin::LDAPfilter BR Mail::SpamAssassin::Plugin::LDAPfilter provides LDAP-based blacklist and whitelist filtering capabilities to SpamAssassin 3.x installs. Specific resources from the SMTP session and the RFC822 message are parsed out and searches are submitted to an LDAP server, with the resultant attribute values being assigned individual score values.BR Created by: Eric A. HallBR Contact: ehall@ntrg.comBR License Type: Same as SpamAssassinBR Status: currently stable and also undergoing ongoing development BR Available at: http://www.ntrg.com/misc/ldapfilter/ BR Note: see http://www.ntrg.com/misc/ldapfilter/ldapfilter.html firstBR

Mail::SpamAssassin::Plugin::iXhash BR Mail::SpamAssassin::Plugin::iXhash is based on the procmail-based project 'NiXSpam', created and maintained by Bert Ungerer, editor with the German IT-magazin 'iX' (http://www.heise.de/ix/). Basically redundant information is removed from the body of a mail, then a MD5 hash is computed from the rest and compared to a given database of known spam. The actual comparison is realised via DNS. See code for more info. Read up at http://www.heise.de/ix/nixspam/ for even more. .BR Created by: Dirk BonengelBR Contact: dirk.bonengel@login-solutions.deBR License Type: Same as SpamAssassinBR Status: works-for-me-but-needs-more-perl-know-how releaseBR Available at: Self:iXhash BR Note: Please read the POD too BR

URICountry BR This plugin provides meta data for scoring URIs based on the country in which they are hosted enabling easy creation of rules for any countryBR Created by: Derek HardingBR Contact: derek_sa at atuin dot net BR License Type: Same as SpamAssassinBR Status: active BR Available at: Self:URICountryPlugin BR

SAGreyBR SAGrey is two-phased, in that it first looks to see if the current score of the current message exceeds the user-defined threshold value (as set in one of the cf files), and then looks to see if the message sender's email and IP address tuple are already known to the auto-whitelist (AWL) repository. If the message is spam and the sender is unknown, SAGrey assumes that this is one-time spam from a throwaway or zombie account, and fires accordingly.BR Created by: Eric A. HallBR License Type: Same as SpamAssassinBR Status: seemingly-functional initial release; ongoing developmentBR Available at: http://www.ntrg.com/misc/sagrey/ BR

POPAuth BR Utilizes an access.db style hash file to extend the SpamAssassin trusted_networks to 'POPAuth' or 'POP-before-SMTP' hosts by dynamically adding and removing the hosts or networks found in the specified database to SpamAssassin's trusted_networks configuration. BR Created by: Daryl C. W. O'Shea BR Contact: spamassassin at dostech dot ca BR License Type: Apache License, Version 2.0 BR Status: active BR Available at: Self:POPAuthPlugin BR

CustomDeleteTag BR This SpamAssassin plugin module allows users to specify a value that will be added to the message header, for all messages, specifying what value/score it is safe to delete the message. Obviously, you need some other process that looks at this header and performs the action, since SpamAssassin only filters and does not delete. BR Created by: Michael Parker BR Contact: parkerm at pobox dot com BR License Type: Apache License, Version 2.0 BR Status: active BR Available at: Self:CustomDeleteTag BR

Persistent Database Plugin BR This plugin module provides persistent database connections. It uses the DBI interface in much the same way that Apache::DBI does, in fact a large portion of the inspiration comes from that module.

To use, all you need to do is load the plugin module, via loadplugin, and it will automatically step in and handle your database connections.

Requires SpamAssassin 3.1+ BR Created by: Michael Parker BR Contact: parkerm at pobox dot com BR License Type: Artistic License BR Status: active BR Available at: Self:DBIPlugin BR

WebRedirect BR Fetches web pages linked to in messages and provides their contents in a pseudo-header that can be used in custom header rules.

Two eval tests are also provided to report links that return an HTTP status of either 403 (Forbidden) or 404 (Not Found).

...

http://www.commtouch.com/sites/all/themes/commtouch/images/commtouch-logo.gif

Commtouch Plug-in for SpamAssassin

Commtouch offers a SpamAssassin plug-in for its Anti-Spam and Zero-Hour Virus Outbreak Protection technologies. Messages are passed to the Commtouch engine and the results are converted into SpamAssassin scores. Embedding the Commtouch technology allows existing SpamAssassin systems to simultaneously increase accuracy and decrease the amount of resources required for maintenance, with an easy and fast integration effort.

Commtouch SA-Plugin — The Commtouch Plug-In is a quick, easy way to inoculate SpamAssassinprotected mail servers against zero-hour threats, and to beef up detection against zombie or botnet-generated spam.

Created by: Commtouch Software Ltd.

Contact: Gabriel.Mizrahi at Commtouch dot com

License Type: Commercial annual subscription

Status: Active

Updated: Old

Available at: http://www.commtouch.com/Site/Products/SpamAssassin.asp

...

Cloudmark Authority
8 different fingerprinting algorithms for spam, phishing, and virus. Authority offers significant performance and accuracy improvements with automatic rules and configuration updates every minute. Brought to you by the makers of Razor.
Created by: Cloudmark
Contact: satrial at cloudmark dot com
License Type: Commercial annual subscription
Status: active
Updated: Old
Available at: http://www.cloudmark.com/spamassassin
Note: Razor plug-in with local signature cache

...

PDFassassin
A plugin which scans PDF attachments, exports text from PDF files and uses OCR to extract image spam embeded in PDF files. Helpful to catch Spam messages been sent as PDF files, uses the gocr and pdftotext utilities as a dependency
Created by: Ben Duncan
Contact: info at calacode dot com
License Type: Same as SpamAssassin
Status: active
Updated: Old
Available at: http://blog.atmail.com/?p=61
Note: First release, proof of concept

...

DumpText
A demo plugin that simply dumps the rendered text to stderr.
Created by: Justin Mason
Contact: jm at jmason dot org
License Type: public domain (it's tiny!)
Status: active
Updated: Old
Available at: DumpTextPlugin

...

ClamAV
This plugin submits the entire email to a locally running Clam AntiVirus server for virus detection.
Created by: Troels Walsted Hansen
Contact: troels at thule dot no
License Type: Public Domain
Status: Active
Updated: Old
Available at: File::Scan::ClamAV]
Note: Requires the [http://search.cpan.org/~jamtur/File-Scan-ClamAV/lib/File/Scan/ClamAV.pm perl module.

...

WrongMX
A plugin that determines if an email was sent to a lower preference MX when a higher preference MX was probably available.
Created by: Daryl C. W. O'Shea
Contact: spamassassin at dostech dot ca
License Type: public domain
Status: active
Updated: Old
Available at: WrongMXPlugin

...

AuthzUser
A example plugin using the services_allowed_for_username hook (available in 3.1 dev tree) that determines if a username is authorized to use a particular service.
Created by: Michael Parker
Contact: parkerm at pobox dot com
License Type: public domain
Status: active
Updated: Old
Available at: AuthzUserPlugin

...

ReplaceTags
A plugin to create character classes, which can be used in your rules to increases the chance of matching.
Created by: Felix Bauer
Contact: dev - at - doph dot com
License Type: Public Domain
Status: active
Updated: Old
Available at: ReplaceTags
Note: Please read the POD

...

PublicCheckTo
A plugin that tests for email sent to public addresses, (such as mailing lists) it can optionally allow "If the email is to this address, its probably spam UNLESS it is a reply." It does this by checking the In-Reply-To header against known message IDs.
Created by: Jamie Hoglund
Contact: http://www.geniegate.com/contact.php
License Type: Free
Status: beta
Updated: Old
Available at: http://geniegate.com/other/spamref/index.php
Note: For the In-Reply-To to work, it needs a storage implementation. (Included are SQL and flat file)

...

CustomLearner
This plugin implements a different bayes learning algorithm: every message marked as spam is learned as spam and every other message is learned as ham.
Please read the source and http://bugzilla.spamassassin.org/show_bug.cgi?id=2094 for details.
Created by: Nikolaus Rath
Contact: Nikolaus@rath.org
License Type: Same as SpamAssassin itself
Status: Quick hack
Updated: Old
Available at: http://bugzilla.spamassassin.org/show_bug.cgi?id=2094
Note: This plugin should really use the new plugin interface. I intend to implement it as soon as SA 3.1.0 is ready.

...

!UIUC
Mail::SpamAssassin::UIUC is a project to connecting the CITES Spam Control (CSC) project, which runs on all mails sent to @uiuc.edu addreses (plus internal CITES mail servers like express.cites.uiuc.edu), and SpamAssassin, which is used at many smaller sites for all incoming mail. The goals were to a) make sure that the work from CITES' servers is not removed by SpamAssassin and b) hopefully use the information received from those servers as well.
Created by: Tim Skirvin
Contact: tskirvin@ks.uiuc.edu
License Type: Same as SpamAssassin
Status: It works, and will probably be maintained to match the campus setup.
Updated: Old
Available at: http://www.ks.uiuc.edu/Development/MDTools/spamassassin-uiuc/
Note: This distribution is actually released as a full patch to SpamAssassin, for ease of use by the UIUC community. More information on modified files is available at the main website.

...

Mail::SpamAssassin::Plugin::LDAPfilter
Mail::SpamAssassin::Plugin::LDAPfilter provides LDAP-based blacklist and whitelist filtering capabilities to SpamAssassin 3.x installs. Standard elements from the SMTP session and the RFC822 message are parsed out and searches are submitted to an LDAP server, and scorable responses are returend for any matches. For example, if a message contains a parseable domain name, the domain name will be used as a search key against the LDAP filters, and if a match is found the plugin will return a scorable marker, which could either be positive (blacklist) or negative (whitelist).
Created by: Eric A. Hall
Contact: ehall@ntrg.com
License Type: Same as SpamAssassin
Status: currently stable and also undergoing ongoing development
Updated: Old
Available at: http://www.eric-a-hall.com/software/spamassassin-ldapfilter/

...

Mail::SpamAssassin::Plugin::iXhash
Mail::SpamAssassin::Plugin::iXhash is based on the procmail-based project 'NiXSpam', created and maintained by Bert Ungerer, editor with the German IT-magazin 'iX' (http://www.heise.de/ix/). Basically redundant information is removed from the body of a mail, then a MD5 hash is computed from the rest and compared to a given database of known spam. The actual comparison is realised via DNS. See code for more info. Read up at http://www.heise.de/ix/nixspam/ for even more.
No further development, usage discouraged. .
Created by: Dirk Bonengel
Contact: dirk.bonengel@login-solutions.de
License Type: Same as SpamAssassin
Status: no further development
Updated: Old
Available at: iXhash
Note: Please read the POD too

...

URICountry
This plugin provides meta data for scoring URIs based on the country in which they are hosted enabling easy creation of rules for any country
Created by: Derek Harding
Contact: derek_sa at atuin dot net
License Type: Same as SpamAssassin
Status: active
Updated: Old
Available at: URICountryPlugin

...

SAGrey
SAGrey is a two-phased greylist tool for use inside spamassassin. It first looks to see if the score of the current message exceeds the current "spam" threshold value, and if so then it looks to see if the message sender's email and IP address tuple are already known to the auto-whitelist (AWL) repository. If the message exceeds the spam score and the sender is unknown to spamassassin, SAGrey assumes that this is one-time spam from a throwaway or zombie account, and fires accordingly.
This is badly named, as it does not actually do greylisting.
Created by: Eric A. Hall
License Type: Same as SpamAssassin
Status: seemingly-functional initial release; ongoing development
Updated: Old
Available at: http://www.eric-a-hall.com/software/spamassassin-sagrey/

...

POPAuth
Utilizes an access.db style hash file to extend the SpamAssassin trusted_networks to 'POPAuth' or 'POP-before-SMTP' hosts by dynamically adding and removing the hosts or networks found in the specified database to SpamAssassin's trusted_networks configuration.
Created by: Daryl C. W. O'Shea
Contact: spamassassin at dostech dot ca
License Type: Apache License, Version 2.0
Status: active
Updated: Old
Available at: POPAuthPlugin

...

CustomDeleteTag
This SpamAssassin plugin module allows users to specify a value that will be added to the message header, for all messages, specifying what value/score it is safe to delete the message. Obviously, you need some other process that looks at this header and performs the action, since SpamAssassin only filters and does not delete.
Created by: Michael Parker
Contact: parkerm at pobox dot com
Limited decoding of data contained in pages is also attempted. The decoded data is provided in an additional pseudo-header that is made available to custom header rules. BR Created by: Daryl C. W. O'Shea BR Contact: spamassassin at dostech dot ca BR License Type: Apache License, Version 2.0 BR
Status: active BR
Updated: Old
Available at: Self:WebRedirectPlugin BR

Stats Plugin BR Keeps real-time statistics inside of a MySQL database. Statistics are rotated on a daily basis and contain user totals for that day; including total ham, spam, and messages processed. A "$TOTALS" field provides the complete summary of messages processed by the system for the day. BR Created by: James Keating BR Contact: jamesk at okeating dot net BR License Type: Apache License, Version 2.0 BR Status: active BR Available at: Self:StatsPlugin BR

OCR Plugin BR Checks for specific keywords in image/gif attachments, using gocr. This can be used to detect spam that puts all the real contect in an attached image, accompanied with random text and html (no URL's, etc). BR Created by: Maarten de Boer BR Contact: mdeboer at iua dot upf dot edu BR License Type: Same as SpamAssassin BR Status: active BR Available at: Self:OcrPlugin BR Note: this is my first SA plugin, so any feedback is welcome. Please test and send reports. BR

CustomDeleteTag

...

Persistent Database Plugin
This plugin module provides persistent database connections. It uses the DBI interface in much the same way that Apache::DBI does, in fact a large portion of the inspiration comes from that module.

To use, all you need to do is load the plugin module, via loadplugin, and it will automatically step in and handle your database connections.

Requires SpamAssassin 3.1+
Created by: Michael Parker
Contact: parkerm at pobox dot com
License Type: Artistic License
Status: active
Updated: Old
Available at: DBIPlugin

...

WebRedirect
Fetches web pages linked to in messages and provides their contents in a pseudo-header that can be used in custom header rules.

Two eval tests are also provided to report links that return an HTTP status of either 403 (Forbidden) or 404 (Not Found).

Limited decoding of data contained in pages is also attempted. The decoded data is provided in an additional pseudo-header that is made available to custom header rules.
Created by: Daryl C. W. O'Shea
Contact: spamassassin at dostech dot ca
License Type: Apache License, Version 2.0
Status: active
Updated: Old
Available at: WebRedirectPlugin

...

Stats Plugin
Keeps real-time statistics inside of a MySQL database. Statistics are rotated on a daily basis and contain user totals for that day; including total ham, spam, and messages processed. A "$TOTALS" field provides the complete summary of messages processed by the system for the day.
Created by: James Keating
Contact: jamesk at okeating dot net
License Type: Apache License, Version 2.0
Status: active
Updated: Old
Available at: StatsPlugin

...

OCR Plugin
Checks for specific keywords in image/gif OCR scanner and image validator SA-plugin BR Checks for specific keywords in gif/jpg/png attachments, using gocr. This can be used to detect spam that puts all the real contect in an attached image, accompanied with random text and html (no URL's, etc). There are also various rules to validate attached images and detect forged content types or broken images. This plugin needs SpamAssassin 3.1.1 or later. The version 2.0 is able to defeat recent gif animations which use gif tricks to avoid OCR.BR Created by: Martin Blapp BR Contact: mb at imp dot ch BR License Type: BSD BR Status: active BR Available at: http://antispam.imp.ch/patches/ocrtext-3.2.tgz BR Note: Feedback and new sample images are
Created by: Maarten de Boer
Contact: mdeboer at iua dot upf dot edu
License Type: Same as SpamAssassin
Status: active
Updated: Old
Available at: OcrPlugin
Note: this is my first SA plugin, so any feedback is welcome. Please test and send reports. BR

...

Fuzzy OCR Plugin BR Derived from OcrPlugin (see above), but has many feature enhancements, including an approximate matching algorithm to compensate recognition errors and obfuscation, support for broken gifs, jpeg and png, dynamic scoring, automatic content-type independant format detection and many more.BR Created by: Christian Holler BR Contact: decoder_at_own-hero_dot_net BR License Type: Same as SpamAssassin BR Status: active BR Available at: Self:FuzzyOcrPlugin BR OCR scanner and image validator SA-plugin
Checks for specific keywords in gif/jpg/png attachments, using gocr. This can be used to detect spam that puts all the real contect in an attached image, accompanied with random text and html (no URL's, etc). There are also various rules to validate attached images and detect forged content types or broken images. This plugin needs SpamAssassin 3.1.1 or later. The version 2.0 is able to defeat recent gif animations which use gif tricks to avoid OCR.
Created by: Martin Blapp
Contact: mb at imp dot ch
License Type: BSD
Status: active
Updated: Old
Available at: http://antispam.imp.ch/patches/ocrtext-3.2.tgz
Note: Feedback and new sample images are welcome. Please test and send reports. BRDSPAM BR When using dspam in conjuction with SpamAssassin and amavisd-new, amavisd-new automatically has dspam calculate the probabability of a message being HAM/SPAM and then insert headers. If you have

...

Fuzzy OCR Plugin
Derived from OcrPlugin (see above), but has many feature enhancements, including an approximate matching algorithm to compensate recognition errors and obfuscation, support for broken gifs, jpeg and png, dynamic scoring, automatic content-type independant format detection and many more.
Created by: Christian Holler
Contact: decoder_at_own-hero_dot_net
SA installed, the dspam information goes to waste. That is unless you take advantage of this plugin.BR Created by: Eric Lubow BR Contact: eric at lubow dot org BR License Type: Same as SpamAssassin BR
Status: active BR Available at: http://eric.lubow.org/projects/dspam-spamassassin-plugin/ BR Note: Using dspam's results, this module adds a tag/token to the message that SA picks up and based on the score you assign it in the ruleset configuration file, it adds/subtracts that score. Read the homepage link for more information.BR

Relayed By Dialup BR This plugin tries to find out if the delivering host has its IP coded in the DNS-record. it doesn't lookup the IPs itself, but takes the data from the Received-Headers.BR Created by: Lars Uffmann, converted to a Module: Cord Beermann BR Contact: lu at cachescrubber.org, cord@Wunder-Nett.org BR License Type: same as Spamassassin BR Status: active BR Available at: RelayedByDialup BR Sample Results: on my setup hits of this test are 97% spam, the rest is ham BR

Addressbook BR This provides a way to automatically give a negative score to all addresses in an addressbook, which may be updated dynamically. It's not the same as whitelisting all addresses because spammers may know about some of them, so we don't want to whitelist, only give a small negative score. It's not the same as autowhitelist (AWL), which is an unlabeled learner, i.e. it just smooths scores per sender over time, but doesn't help senders who have consistently high scores.BR Created by: Karl Chen BR Contact: <quarl@nospam.quarl.org> BR License Type: Public domain BR Status: activeBR Available at: http://svn.cubewano.org/repos/spamassassin-addons/trunk/plugins/addressbook.pm BR

Wiki Markup
*Mail::SpamAssassin::Plugin::OpenPGP* [BR] Validates OpenPGP-signed emails; requires Mail::GPG[BR] Created by: Dave Brondsema [BR] Contact: konfidi-devel -at- lists.sourceforge.net[BR] License Type: Apache License, Version 2.0 [BR] Status: Active [BR] Available at: \[http://search.cpan.org/perldoc?Mail::SpamAssassin::Plugin::OpenPGP\] [BR] SVN: http://konfidi.org/wiki/SVN/ (in clients/spamassassin-openpgp/trunk) [BR]

Wiki Markup
*crm114* [BR] Plugin to use \[http://crm114.sourceforge.net/ CRM114\][BR] Created by: [MartinSchuette] [BR] Contact: info -at- mschuette.name [BR] License Type: Apache License, Version 2.0 [BR] Status: Active [BR] Available at: \[http://mschuette.name/files/crm114.pm\] and \[http://mschuette.name/files/crm114.cf\] [BR]

Wiki Markup
*Bayes OCR Plugin* [BR] Bayes OCR Plugin performs a Bayesian content analysis of the OCR extracted text to help Spamassassin catch spam messages with attached images. [BR] Created by: PRA Group, DIEE, University of Cagliari (Italy) [BR] Contact: see \[http://prag.diee.unica.it/n3ws1t0/?q=node/108 Bayes OCR Plugin - Project page\] [BR] License Type: Apache License, Version 2.0 [BR] Status: Active [BR] Available at: \[http://prag.diee.unica.it/n3ws1t0/?q=node/108 Bayes OCR Plugin - Project page\] [BR] Note: (Please remind Bayes OCR Plugin is still beta!)[BR]

Wiki Markup
*Image Cerberus Plugin* [BR] Image Cerberus Plugin performs a content analysis of images attached to e-mails by image processing and pattern recognition techniques. [BR] Created by: PRA Group, DIEE, University of Cagliari (Italy) and Ambient Intelligence Lab, Sardegna DistrICT, Sardegna Ricerche (italy) [BR] Contact: see \[http://prag.diee.unica.it/n3ws1t0/imageCerberus Plugin - Project page\] [BR] License Type: Apache License, Version 2.0 [BR] Status: Active [BR] Available at: \[http://prag.diee.unica.it/n3ws1t0/imageCerberus Plugin - Project page\] [BR]

sa2dnsbl BR If you want to build your own rbldns System and reuse the Filtering results of Spamassassin this package could be the sollution. It is a UDP based client-server application which reports all spamming IP's to one Server. A worker thread (cronjob) creates the IP list to block. This sollution take use of the rbldns server included in the djbdns distribution.BR The package includes three components. The sa2dnsblc Plugin for Spamassassin, the sa2dnsbld Server and finally the sa2dnsblw Worker. Installation instructions are included in sa2dnsbld.plBR Created by: Frank Blechschmitt, FBISBR Contact: http://www.fbis.ch BR License Type: Apache License, Version 2.0 BR Status: Active BR Available at: http://www.fbis.ch/download.php?id=17 BR

Log Scanned Messages BR This plugin will write a copy of every mail scanned to the C</tmp/spamassassin_scanned_msgs> directory (creating that dir if it doesn't already exist). This may be very useful when attempting to debug certain error conditions that only manifest with certain input messages.BR Created by: Justin Mason BR Contact: http://jmason.org BR License Type: Apache License, Version 2.0 BR Status: Active BR Available at: http://taint.org/x/2007/LogScannedMessages.pm BR

Wiki Markup
*Mail::SpamAssassin::Plugin::Konfidi* [BR] For authenticated messages, queries the Konfidi (http://konfidi.org) trust network for a computed inferred trust value of the sender.[BR] Note: as of Jan '08 only Mail::SpamAssassin::Plugin::OpenPGP is supported for auth; SPF and DKIM are planned. Created by: Dave Brondsema [BR] Contact: konfidi-devel -at- lists.sourceforge.net[BR] License Type: Apache License, Version 2.0 [BR] Status: Active [BR] Available at: \[http://search.cpan.org/perldoc?Mail::SpamAssassin::Plugin::Konfidi\] [BR] SVN: http://konfidi.org/wiki/SVN/ (in clients/spamassassin/trunk) [BR]

Freemail BR Checks if message is sent from a "freemail" account. Also checks a specific spam sign, if a message has Reply-To or email mentioned in body pointing to a different freemail account.BR Created by: Henrik Krohns BR Contact: sa at hege.li BR License Type: WTFPL BR Status: Active BR Available at: http://sa.hege.li/FreeMail.pm http://sa.hege.li/FreeMail.cf BR

Mail::SpamAssassin::Plugin::CollectTokens BR Collects tokens from bayes in a SQL database, making it possible to see what tokens the bayes database contains.BR Created by: Jonas Eckerman BR Contact: jonas at frukt dot org BR License Type: Public Domain BR Status: active BR Available at: http://whatever.frukt.org/spamassassin.text.shtml#CollectTokens.pm BR


Updated: Old
Available at: FuzzyOcrPlugin
Note: Feedback and new sample images are welcome. Please test and send reports.

...

DSPAM
When using dspam in conjuction with SpamAssassin and amavisd-new, amavisd-new automatically has dspam calculate the probabability of a message being HAM/SPAM and then insert headers. If you have SA installed, the dspam information goes to waste. That is unless you take advantage of this plugin.
Created by: Eric Lubow
Contact: eric at lubow dot org
License Type: Same as SpamAssassin
Status: active
Updated: Old
Available at: http://eric.lubow.org/projects/dspam-spamassassin-plugin/
Note: Using dspam's results, this module adds a tag/token to the message that SA picks up and based on the score you assign it in the ruleset configuration file, it adds/subtracts that score. Read the homepage link for more information.

...

Relayed By Dialup
This plugin tries to find out if the delivering host has its IP coded in the DNS-record. it doesn't lookup the IPs itself, but takes the data from the Received-Headers.
Created by: Lars Uffmann, converted to a Module: Cord Beermann
Contact: lu at cachescrubber.org, cord@Wunder-Nett.org
License Type: same as Spamassassin
Status: active
Updated: Old
Available at: RelayedByDialup
Sample Results: on my setup hits of this test are 97% spam, the rest is ham

...

Addressbook
This provides a way to automatically give a negative score to all addresses in an addressbook, which may be updated dynamically. It's not the same as whitelisting all addresses because spammers may know about some of them, so we don't want to whitelist, only give a small negative score. It's not the same as autowhitelist (AWL), which is an unlabeled learner, i.e. it just smooths scores per sender over time, but doesn't help senders who have consistently high scores.
Created by: Karl Chen
Contact: < quarl@nospam.quarl.org >
License Type: Public domain
Status: active
Updated: Old
Available at: http://git.cubewano.org/git/spamassassin-addons/plain/plugins/addressbook.pm

...

Mail::SpamAssassin::Plugin::OpenPGP
Validates OpenPGP-signed emails; requires Mail::GPG
Created by: Dave Brondsema
Contact: konfidi-devel at lists.sourceforge.net
License Type: Apache License, Version 2.0
Status: Active
Updated: Old
Available at: http://search.cpan.org/perldoc?Mail::SpamAssassin::Plugin::OpenPGP
SVN: http://konfidi.org/wiki/SVN/ (in clients/spamassassin-openpgp/trunk)

...

crm114
Plugin to use CRM114
Created by: MartinSchuette
Contact: info at mschuette.name
License Type: Apache License, Version 2.0
Status: Active
Updated: Old
Available at: http://mschuette.name/wp/crm114-spamassassin-plugin/ (crm114.pm and crm114.cf)

...

Bayes OCR Plugin
Bayes OCR Plugin performs a Bayesian content analysis of the OCR extracted text to help Spamassassin catch spam messages with attached images.
Created by: PRA Group, DIEE, University of Cagliari (Italy)
Contact: see Bayes OCR Plugin - Project page
License Type: Apache License, Version 2.0
Status: Active
Updated: Old
Available at: Bayes OCR Plugin - Project page
Note: (Bayes OCR Plugin is still beta!)

...

Image Cerberus Plugin
Image Cerberus Plugin performs a content analysis of images attached to e-mails by image processing and pattern recognition techniques.
Created by: PRA Group, DIEE, University of Cagliari (Italy) and Ambient Intelligence Lab, Sardegna DistrICT, Sardegna Ricerche (italy)
Contact: see Plugin - Project page
License Type: Apache License, Version 2.0
Status: Active
Updated: Old
Available at: Plugin - Project page

...

sa2dnsbl
If you want to build your own rbldns System and reuse the Filtering results of Spamassassin this package could be the sollution. It is a UDP based client-server application which reports all spamming IP's to one Server. A worker thread (cronjob) creates the IP list to block. This sollution take use of the rbldns server included in the djbdns distribution.
The package includes three components. The sa2dnsblc Plugin for Spamassassin, the sa2dnsbld Server and finally the sa2dnsblw Worker. Installation instructions are included in sa2dnsbld.pl
Created by: Frank Blechschmitt, FBIS
Contact: http://www.fbis.ch
License Type: Apache License, Version 2.0
Status: Active
Updated: Old
Available at: http://www.fbis.ch/download.php?id=17

...

Log Scanned Messages
This plugin will write a copy of every mail scanned to the C</tmp/spamassassin_scanned_msgs> directory (creating that dir if it doesn't already exist). This may be very useful when attempting to debug certain error conditions that only manifest with certain input messages.
Created by: Justin Mason
Contact: http://jmason.org
License Type: Apache License, Version 2.0
Status: Active
Updated: Old
Available at: http://taint.org/x/2007/LogScannedMessages.pm

...

Mail::SpamAssassin::Plugin::Konfidi
For authenticated messages, queries the Konfidi (http://konfidi.org) trust network for a computed inferred trust value of the sender.
Note: as of Jan '08 only Mail::SpamAssassin::Plugin::OpenPGP is supported for auth; SPF and DKIM are planned. Created by: Dave Brondsema
Contact: konfidi-devel at lists.sourceforge.net
License Type: Apache License, Version 2.0
Status: Active
Updated: Old
Available at: http://search.cpan.org/perldoc?Mail::SpamAssassin::Plugin::Konfidi
SVN: http://konfidi.org/wiki/SVN/ (in clients/spamassassin/trunk)

...

Freemail
Checks if message is sent from a "freemail" account. Also checks a specific spam sign, if a message has Reply-To or email mentioned in body pointing to a different freemail account.
Created by: Henrik Krohns
Contact: sa at hege.li
License Type: Apache License, Version 2.0
Status: Active
Updated: Old
Available at: Integrated in SpamAssassin 3.3 (see links http://sa.hege.li/)

...

Mail::SpamAssassin::Plugin::CollectTokens
Collects tokens from bayes in a SQL database, making it possible to see what tokens the bayes database contains.
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active
Updated: Old
Available at: http://whatever.frukt.org/spamassassin.text.shtml#CollectTokens.pm

...

Mail::SpamAssassin::Plugin::p0fOS
Fetches the OS info from a database populated from p0f and inserts it in a header for use in scores and bayes. The database can reside on and/or be populated from a different system (such as a firewall or router).
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active
Updated: Old
Available at: http://whatever.frukt.org/p0fstats.text.shtml#p0fOS.pm
Note: To use you also need the scripts (from the same place as the plugin) and the p0f OS fingerprinting application.

...

Mail::SpamAssassin::Plugin::MimeMagic
Checks for mismatches between a parts MIME type and its actual content.
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active (experimental)
Updated: Old
Available at: http://whatever.frukt.org/spamassassin.text.shtml#MimeMagic.pm
Note: Some mismatches really aren't, so the plugin can have a map between types that are considered equal.

...

Mail::SpamAssassin::Plugin::HashCount
Counts messages using iXhash/NixSpam like hashes.
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active
Updated: Old
Available at: http://whatever.frukt.org/spamassassin.text.shtml#HashCount.pm

...

Mail::SpamAssassin::Plugin::HeadersToBody
Copies the (decoded) content of specified headers to the decoded/rendered body of a the message object.
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active
Updated: Old
Available at: http://whatever.frukt.org/spamassassin.text.shtml#HeadersToBody.pm

...

FromNotReplyTo
Compares 'From:' and 'Reply-To:' headers.
Created by: Ronnie Mose
Contact: rm at travelaccommodation dot eu
License Type: Public Domain
Updated: Old
Available at: FromNotReplyTo

...

http://www.dkim-reputation.org/fileadmin/templates/img/logo.png

DKIM Reputation Plugin
Replacement of the DKIM.pm plugin with additional inclusion of reputation data from www.dkim-reputation.org. This aids especially to block known spam accounts at freemailers and spammers sending DKIM signed spam with their own domains. Additionally positive reputation will be used in the future to reduce the false positive problem (positive scoring can be disabled). Currently an appropriate ruleset to distinct between neutral and good reputation is elaborated, feedback is welcome.
Requires SpamAssassin 3.1.2+
Created by: Florian Sager
Contact: http://www.dkim-reputation.org
License Type: Apache License, Version 2.0
Status: active
Updated: Old
Available at: http://www.dkim-reputation.org/spamassassin/

...

SA_CDO
Plugin for Micosoft Exchange server that communicates with a local or remote spamd deamon. Processes the mail depending on the spam score and the plugin configuration.
Created by: Robin Aerts
Contact: robin.aerts@muziekcentrum.be
License Type: (license)
Status: active
Updated: Old
Available at: http://sourceforge.net/project/showfiles.php?group_id=250443

...

Mail::SpamAssassin::Plugin::URLRedirect
Follows specified URLs to see if they redirect. If they do redirect, the new location is added to the message meta-data, and redirection depth can be tested with eval test.
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active
Updated: Old
Mail::SpamAssassin::Plugin::p0fOS BR Fetches the OS info from a database populated from p0f and inserts it in a header for use in scores and bayes. The database can reside on and/or be populated from a different system (such as a firewall or router).BR Created by: Jonas Eckerman BR Contact: jonas at frukt dot org BR License Type: Public Domain BR Status: active BR Available at: http://whatever.frukt.org/p0fstatsspamassassin.text.shtml#p0fOSshtml#URLRedirect.pm BR Note: To use you also need the scripts (from the same place as the plugin) and the p0f OS fingerprinting application.BR
Mirror: http://mmm.truls.org/m/ExtractText.zip

...

Mail::SpamAssassin::Plugin::MimeMagic BR Checks for mismatches between a parts MIME type and its actual content.BR ExtractText
Uses plugin extractors and/or external tools to extract text from message parts. Extractor plugins can extract parts that will be fed into the plugin for checking, so for example a an image OCR extractor could get to check images extracted from a PDF by another extractor. How to extract what from what is very configurable. Included are configs for MS Word, RTF, OpenDocument and PDF files, and a very simplistic OpenXML plugin.
Created by: Jonas Eckerman BR
Contact: jonas at frukt dot org BR jonas@frukt.org
License Type: Public Domain BR
Status: active (experimental) BR
Updated: Old
Available at: http://whatever.frukt.org/spamassassin.text.shtml#MimeMagicshtml#ExtractText.pm BR Note: Some mismatches really aren't, so the plugin can have a map between types that are considered equal.BR
Mirror: http://mmm.truls.org/m/ExtractText.zip

...

Mail::SpamAssassin::Plugin::HashCount BR Counts messages using iXhash/NixSpam like hashes.BR Created by: Jonas Eckerman BR Contact: jonas at frukt dot org BR License Type: Public Domain BR Status: active BR SaveHits
Stores a copy of a message in a dated directory when specific rules are hit and then creates a dated directory for each rule that is hit and creates a symlink to the message file allowing you to quickly find messages on a given date hitting a specific rule. Useful for developing and testing new rules.
Created by: Steve Freegard
Contact: steve.freegard at fsl.com
License Type: Apache
Status: Active
Updated: Old
Available at: http://whateverwww.fruktfsl.orgcom/support/spamassassinSaveHits.text.shtml#HashCount.pm BR

...

Mail::SpamAssassin::Plugin::HeadersToBody BR Copies the (decoded) content of specified headers to the decoded/rendered body of a the message object.BR Created by: Jonas Eckerman BR Contact: jonas at frukt dot org BR License Type: Public Domain BR Status: active BR DecodeShortURLs
Decodes shortened URLs via HTTP HEAD request to the shortening service and adds the decoded URL into the list of URIs extracted by SpamAssassin for other plugins to find (e.g. URIDNSBL).
Created by: Steve Freegard
Contact: steve.freegard at fsl.com
License Type: Apache
Status: Active
Updated: Old
Available at: http://whatever.frukt.org/spamassassin.text.shtml#HeadersToBody.pm BRFromNotReplyTo BR Compares 'From:' and 'Reply-To:' headers. BR Created by: Ronnie Mose BR Contact: rm at travelaccommodation dot eu BR License Type: Public Domain BR Available at: FromNotReplyTo BRwww.fsl.com/support/DecodeShortURLs.pm and http://www.fsl.com/support/DecodeShortURLs.cf

...

DNSWL spam reporting

Adds DNSWL to the services which receive a report via the command "spamassassin --report" (or -r).

Contact: Darxus

License Type: Apache

Status: Active

Updated: 2011-03-20

Available at: http://www.chaosreigns.com/dnswl/sa_plugin/

...

Format for new entries

Suggested format (a la CustomRulesets format):

name-of-plugin

BR (brief description goes here) BR

Created by: (name)

BR Contact: (contact addr) BR

License Type: (license) BR

Status: Active / Locked / Defunct (see above)

Updated: YYYY-MM-DD (date this entry was updated)

(status) BR Available at: (url) BR

Mirror: (if applicable)

BR Note: (any extra notes)

BR Sample Results: (mass-check results if available) BR

...

CategorySoftware CategorySoftware