THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
Custom Plugins
To Edit This Page
Click the "Login" link at the top of this page. Create an account. Email private@spamassassin.apache.org , along with your wiki username, requesting write access to this wiki. This applies to this entire wiki.
Disclaimer
Custom or third-party plugins described here are not part of the official SpamAssassin distribution. They may have a different license and are not from the Apache Software Foundation.
...
Please add links to third-party SA plugins to the bottom of this page. Note that only SpamAssassin 3.0.0 or later can use these. To use these, just place the file(s) in /etc/mail/spamassassin your SpamAssassin plugin directory, which may be /usr/share/perl5/Mail/SpamAssassin/Plugin/ (if you use spamd, be sure to restart); SpamAssassin will need at least 1 rule file (ending in .cf) to load the plugin, and that will typically use a loadplugin line to load a .pm file containing the plugin's perl code.
FYI: The You can also keep the plugin's .pm file can be kept in your /etc/mail/spamassassin, too.
Before running these plugins please do the following:
/ or /etc/spamassassin/ directory, but you need to specify the plugin's file name as the second argument to loadplugin. For example, a plugin named Mail::SpamAssassin::Plugin::MyPlugin with a filename of myplugin.pm:loadplugin Mail::SpamAssassin::Plugin::MyPlugin myplugin.pm
| Table of Contents |
|---|
Before running these plugins please do the following:
- Read any extra info available with the plugins, including the Read any extra info available with the plugins, including the comments in the .cf files, or the POD documentation in the .pm file.
- Check to make sure that the default scores fit your installation. You might want to modify scores.
- Make sure to --lint the rules after loading them.
- Test the new plugin. Keep an eye on hits from the new rules to determine if the scoring is right for you.
Use at your own risk.
Status Information
These plugins are not generally audited for security, performance or compatibility for any specific SpamAssassin version.
Status Information
ActiveActive: Plugin is actively updated and maintained
Locked: Plugin is not actively updated, but is fine to run and considered "stable"
Defunct: Plugin is no longer maintained, may be out of date or have problems
Please respect the wishes of the authors and/or the site hosts.
The Plugins
SNF4SA - Message SnifferTM Antispam Plugin for SpamAssassin
The Message Sniffer Antispam Plugin for SpamAssassin combines a real-time collaborative IP reputation system, distributed competitive machine learning technologies, and a comprehensive content analysis engine that improves both the accuracy and speed of SpamAssassin without additional tuning.
Created by: ARM Research Labs, LLC
Contact: http://www.armresearch.com/company/contactUs.jsp
License Type: Commercial Subscription
Status: Active
Updated: 2011-03-21
Available at: http://www.armresearch.com/products/SNF4SA.jsp
http://wombatsecurity.com/static/Wombat_sa.png
PhishPatrolTM by Wombat Security Technologies, Inc.
PhishPatrolTM is an email filter from Wombat Security Technologies designed specifically to identify email-based phishing attacks before they can lure users into divulging personal information. In contrast to solutions that rely solely on blacklists and email signatures, the PhishPatrolTM email filter uses advanced machine learning to catch new phishing attacks from the very start. Extensive evaluation of PhishPatrolTM has shown that it consistently catches more phish than the best email spam filters and has far fewer false positives. As a SpamAssassin plug-in, PhishPatrolTM integrates seamlessly with your existing installation of SpamAssassin. PhishPatrolTM — Powerful phishing detection from the makers of PhishGuru and Anti-Phishing Phil.
Created by: Wombat Security Technologies, Inc.
Contact: sales at wombatsecurity dot com
License type: Commercial annual subscription
Status: Active
Updated: Old
Available at: http://wombatsecurity.com
http://www.commtouch.com/sites/all/themes/commtouch/images/commtouch-logo.gif
Commtouch Plug-in for SpamAssassin
Commtouch offers a SpamAssassin plug-in for its Anti-Spam and Zero-Hour Virus Outbreak Protection technologies. Messages are passed to the Commtouch engine and the results are converted into SpamAssassin scores. Embedding the Commtouch technology allows existing SpamAssassin systems to simultaneously increase accuracy and decrease the amount of resources required for maintenance, with an easy and fast integration effort.
Commtouch SA-Plugin — The Commtouch Plug-In is a quick, easy way to inoculate SpamAssassinprotected mail servers against zero-hour threats, and to beef up detection against zombie or botnet-generated spam.
Created by: Commtouch Software Ltd.
Contact: Gabriel.Mizrahi at Commtouch dot com
License Type: Commercial annual subscription
Status: Active
Updated: Old
Available at: http://www.commtouch.com/Site/Products/SpamAssassin.asp
Cloudmark Authority
8 different fingerprinting algorithms for spam, phishing, and virus. Authority offers significant performance and accuracy improvements with automatic rules and configuration updates every minute. Brought to you by the makers of Razor.
Created by: Cloudmark
Contact: satrial at cloudmark dot com
License Type: Commercial annual subscription
Status: active
Updated: Old
Available at: http://www.cloudmark.com/spamassassin
Note: Razor plug-in with local signature cache
PDFassassin
A plugin which scans PDF attachments, exports text from PDF files and uses OCR to extract image spam embeded in PDF files. Helpful to catch Spam messages been sent as PDF files, uses the gocr and pdftotext utilities as a dependency
Created by: Ben Duncan
Contact: info at calacode dot com
License Type: Same as SpamAssassin
Status: active
Updated: Old
Available at: http://blog.atmail.com/?p=61
Note: First release, proof of concept
DumpText
A demo plugin that simply dumps the rendered text to stderr.
Created by: Justin Mason
Contact: jm at jmason dot org
License Type: public domain (it's tiny!)
Status: active
Updated: Old
Available at: DumpTextPlugin
ClamAV
This plugin submits the entire email to a locally running Clam AntiVirus server for virus detection.
Created by: Troels Walsted Hansen
Contact: troels at thule dot no
License Type: Public Domain
Status: Active
Updated: Old
Available at: File::Scan::ClamAV]
Note: Requires the [http://search.cpan.org/~jamtur/File-Scan-ClamAV/lib/File/Scan/ClamAV.pm perl module.
WrongMX
A plugin that determines if an email was sent to a lower preference MX when a higher preference MX was probably available.
Created by: Daryl C. W. O'Shea
Contact: spamassassin at dostech dot ca
License Type: public domain
Status: active
Updated: Old
Available at: WrongMXPlugin
AuthzUser
A example plugin using the services_allowed_for_username hook (available in 3.1 dev tree) that determines if a username is authorized to use a particular service.
Created by: Michael Parker
Contact: parkerm at pobox dot com
License Type: public domain
Status: active
Updated: Old
Available at: AuthzUserPlugin
ReplaceTags
A plugin to create character classes, which can be used in your rules to increases the chance of matching.
Created by: Felix Bauer
Contact: dev - at - doph dot com
License Type: Public Domain
Status: active
Updated: Old
Available at: ReplaceTags
Note: Please read the POD
PublicCheckTo
A plugin that tests for email sent to public addresses, (such as mailing lists) it can optionally allow "If the email is to this address, its probably spam UNLESS it is a reply." It does this by checking the In-Reply-To header against known message IDs.
Created by: Jamie Hoglund
Contact: http://www.geniegate.com/contact.php
License Type: Free
Status: beta
Updated: Old
Available at: http://geniegate.com/other/spamref/index.php
Note: For the In-Reply-To to work, it needs a storage implementation. (Included are SQL and flat file)
CustomLearner
This plugin implements a different bayes learning algorithm: every message marked as spam is learned as spam and every other message is learned as ham.
Please read the source and http://bugzilla.spamassassin.org/show_bug.cgi?id=2094 for details.
Created by: Nikolaus Rath
Contact: Nikolaus@rath.org
License Type: Same as SpamAssassin itself
Status: Quick hack
Updated: Old
Available at: http://bugzilla.spamassassin.org/show_bug.cgi?id=2094
Note: This plugin should really use the new plugin interface. I intend to implement it as soon as SA 3.1.0 is ready.
!UIUC
Mail::SpamAssassin::UIUC is a project to connecting the CITES Spam Control (CSC) project, which runs on all mails sent to @uiuc.edu addreses (plus internal CITES mail servers like express.cites.uiuc.edu), and SpamAssassin, which is used at many smaller sites for all incoming mail. The goals were to a) make sure that the work from CITES' servers is not removed by SpamAssassin and b) hopefully use the information received from those servers as well.
Created by: Tim Skirvin
Contact: tskirvin@ks.uiuc.edu
License Type: Same as SpamAssassin
Status: It works, and will probably be maintained to match the campus setup.
Updated: Old
Available at: http://www.ks.uiuc.edu/Development/MDTools/spamassassin-uiuc/
Note: This distribution is actually released as a full patch to SpamAssassin, for ease of use by the UIUC community. More information on modified files is available at the main website.
Mail::SpamAssassin::Plugin::LDAPfilter
Mail::SpamAssassin::Plugin::LDAPfilter provides LDAP-based blacklist and whitelist filtering capabilities to SpamAssassin 3.x installs. Standard elements from the SMTP session and the RFC822 message are parsed out and searches are submitted to an LDAP server, and scorable responses are returend for any matches. For example, if a message contains a parseable domain name, the domain name will be used as a search key against the LDAP filters, and if a match is found the plugin will return a scorable marker, which could either be positive (blacklist) or negative (whitelist).
Created by: Eric A. Hall
Contact: ehall@ntrg.com
License Type: Same as SpamAssassin
Status: currently stable and also undergoing ongoing development
Updated: Old
Available at: http://www.eric-a-hall.com/software/spamassassin-ldapfilter/
Mail::SpamAssassin::Plugin::iXhash
Mail::SpamAssassin::Plugin::iXhash is based on the procmail-based project 'NiXSpam', created and maintained by Bert Ungerer, editor with the German IT-magazin 'iX' (http://www.heise.de/ix/). Basically redundant information is removed from the body of a mail, then a MD5 hash is computed from the rest and compared to a given database of known spam. The actual comparison is realised via DNS. See code for more info. Read up at http://www.heise.de/ix/nixspam/ for even more.
No further development, usage discouraged. .
Created by: Dirk Bonengel
Contact: dirk.bonengel@login-solutions.de
License Type: Same as SpamAssassin
Status: no further development
Updated: Old
Available at: iXhash
Note: Please read the POD too
URICountry
This plugin provides meta data for scoring URIs based on the country in which they are hosted enabling easy creation of rules for any country
Created by: Derek Harding
Contact: derek_sa at atuin dot net
License Type: Same as SpamAssassin
Status: active
Updated: Old
Available at: URICountryPlugin
SAGrey
SAGrey is a two-phased greylist tool for use inside spamassassin. It first looks to see if the score of the current message exceeds the current "spam" threshold value, and if so then it looks to see if the message sender's email and IP address tuple are already known to the auto-whitelist (AWL) repository. If the message exceeds the spam score and the sender is unknown to spamassassin, SAGrey assumes that this is one-time spam from a throwaway or zombie account, and fires accordingly.
This is badly named, as it does not actually do greylisting.
Created by: Eric A. Hall
Contact: eric.hall@gmail.com
License Type: Same as SpamAssassin
Status: seemingly-functional initial release; ongoing development
Updated: Old
Available at: http://www.eric-a-hall.com/software/spamassassin-sagrey/
POPAuth
Utilizes an access.db style hash file to extend the SpamAssassin trusted_networks to 'POPAuth' or 'POP-before-SMTP' hosts by dynamically adding and removing the hosts or networks found in the specified database to SpamAssassin's trusted_networks configuration.
Created by: Daryl C. W. O'Shea
Contact: spamassassin at dostech dot ca
License Type: Apache License, Version 2.0
Status: active
Updated: Old
Available at: POPAuthPlugin
CustomDeleteTag
This SpamAssassin plugin module allows users to specify a value that will be added to the message header, for all messages, specifying what value/score it is safe to delete the message. Obviously, you need some other process that looks at this header and performs the action, since SpamAssassin only filters and does not delete.
Created by: Michael Parker
Contact: parkerm at pobox dot com
License Type: Apache License, Version 2.0
Status: active
Updated: Old
Available at: CustomDeleteTag
Persistent Database Plugin
This plugin module provides persistent database connections. It uses the DBI interface in much the same way that Apache::DBI does, in fact a large portion of the inspiration comes from that module.
To use, all you need to do is load the plugin module, via loadplugin, and it will automatically step in and handle your database connections.
Requires SpamAssassin 3.1+
Created by: Michael Parker
Contact: parkerm at pobox dot com
License Type: Artistic License
Status: active
Updated: Old
Available at: DBIPlugin
WebRedirect
Fetches web pages linked to in messages and provides their contents in a pseudo-header that can be used in custom header rules.
Two eval tests are also provided to report links that return an HTTP status of either 403 (Forbidden) or 404 (Not Found).
Limited decoding of data contained in pages is also attempted. The decoded data is provided in an additional pseudo-header that is made available to custom header rules.
Created by: Daryl C. W. O'Shea
Contact: spamassassin at dostech dot ca
License Type: Apache License, Version 2.0
Status: active
Updated: Old
Available at: WebRedirectPlugin
Stats Plugin
Keeps real-time statistics inside of a MySQL database. Statistics are rotated on a daily basis and contain user totals for that day; including total ham, spam, and messages processed. A "$TOTALS" field provides the complete summary of messages processed by the system for the day.
Created by: James Keating
Contact: jamesk at okeating dot net
License Type: Apache License, Version 2.0
Status: active
Updated: Old
Available at: StatsPlugin
OCR Plugin
Checks for specific keywords in image/gif attachments, using gocr. This can be used to detect spam that puts all the real contect in an attached image, accompanied with random text and html (no URL's, etc).
Created by: Maarten de Boer
Contact: mdeboer at iua dot upf dot edu
License Type: Same as SpamAssassin
Status: active
Updated: Old
Available at: OcrPlugin
Note: this is my first SA plugin, so any feedback is welcome. Please test and send reports.
OCR scanner and image validator SA-plugin
Checks for specific keywords in gif/jpg/png attachments, using gocr. This can be used to detect spam that puts all the real contect in an attached image, accompanied with random text and html (no URL's, etc). There are also various rules to validate attached images and detect forged content types or broken images. This plugin needs SpamAssassin 3.1.1 or later. The version 2.0 is able to defeat recent gif animations which use gif tricks to avoid OCR.
Created by: Martin Blapp
Contact: mbr@freebsd.org
License Type: BSD
Status: active
Updated: Old
Available at: http://antispam.imp.ch/patches/ocrtext-3.2.tgz
Note: Feedback and new sample images are welcome. Please test and send reports.
Fuzzy OCR Plugin
Derived from OcrPlugin (see above), but has many feature enhancements, including an approximate matching algorithm to compensate recognition errors and obfuscation, support for broken gifs, jpeg and png, dynamic scoring, automatic content-type independant format detection and many more.
Created by: Christian Holler
Contact: decoder_at_own-hero_dot_net
License Type: Same as SpamAssassin
Status: active
Updated: Old
Available at: FuzzyOcrPlugin
Note: Feedback and new sample images are welcome. Please test and send reports.
DSPAM
When using dspam in conjuction with SpamAssassin and amavisd-new, amavisd-new automatically has dspam calculate the probabability of a message being HAM/SPAM and then insert headers. If you have SA installed, the dspam information goes to waste. That is unless you take advantage of this plugin.
Created by: Eric Lubow
Contact: eric at lubow dot org
License Type: Same as SpamAssassin
Status: active
Updated: 2011-03-21
Available at: http://eric.lubow.org/projects/dspam-spamassassin-plugin/
Note: Using dspam's results, this module adds a tag/token to the message that SA picks up and based on the score you assign it in the ruleset configuration file, it adds/subtracts that score. Read the homepage link for more information.
Relayed By Dialup
This plugin tries to find out if the delivering host has its IP coded in the DNS-record. it doesn't lookup the IPs itself, but takes the data from the Received-Headers.
Created by: Lars Uffmann, converted to a Module: Cord Beermann
Contact: lu at cachescrubber.org, cord@Wunder-Nett.org
License Type: same as Spamassassin
Status: active
Updated: Old
Available at: RelayedByDialup
Sample Results: on my setup hits of this test are 97% spam, the rest is ham
Addressbook
This provides a way to automatically give a negative score to all addresses in an addressbook, which may be updated dynamically. It's not the same as whitelisting all addresses because spammers may know about some of them, so we don't want to whitelist, only give a small negative score. It's not the same as autowhitelist (AWL), which is an unlabeled learner, i.e. it just smooths scores per sender over time, but doesn't help senders who have consistently high scores.
Created by: Karl Chen
Contact: < quarl@nospam.quarl.org >
License Type: Public domain
Status: active
Updated: Old
Available at: http://git.cubewano.org/git/spamassassin-addons/plain/plugins/addressbook.pm
Unmaintained Plugins
Plugins without a recent "Maintained as of:" date have been moved to UnmaintainedCustomPlugins. If you own one, or have confirmed that it is currently usable, feel free to move it back here and update that field.
Free Plugins
Mail::SpamAssassin::Plugin::AttachmentDetail
SpamAssassin plugin to check attachment details
Created by: Kent Oyer
License Type: ?
Status: Active
Maintained as of: 2023-05-18
Added: 2023-05-18
Available at: https://github.com/mxguardian/Mail-SpamAssassin-Plugin-AttachmentDetail
Mail::SpamAssassin::Plugin::ASCII
SpamAssassin plugin to convert non-ASCII characters to their ASCII equivalents
Created by: Kent Oyer
License Type: ?
Status: Active
Maintained as of: 2023-05-12
Added: 2023-05-12
Available at: https://github.com/mxguardian/Mail-SpamAssassin-Plugin-ASCII
Mail::SpamAssassin::Plugin::PDFInfo2
Improved PDF Plugin for SpamAssassin
Created by: Kent Oyer
License Type: ?
Status: Active
Maintained as of: 2023-01-26
Added: 2023-01-26
Available at: https://github.com/mxguardian/Mail-SpamAssassin-Plugin-PDFInfo2
Mail::SpamAssassin::Plugin::Esp
SpamAssassin plugin for Invaluement.com Service Provider DNSBLs ("SPBL")
Created by: Giovanni Bechis
License Type: Apache License, Version 2.0
Status: Active
Maintained as of: 2020-08-23
Added: 2020-09-09
Available at: https://github.com/bigio/spamassassin-esp
Mail::SpamAssassin::Plugin::ClamAV
Virus check using Clamav antivirus
Created by: Giovanni Bechis
License Type: Apache License, Version 2.0
Status: Active
Maintained as of: 2020-01-18
Added: 2020-06-04
Available at: https://github.com/bigio/spamassassin-clamav
TesseractOCR
Image scanning with Tesseract OCR engine
Created by: MailCleaner / Fastnet SAMail::SpamAssassin::Plugin::OpenPGP
Validates OpenPGP-signed emails; requires Mail::GPG
Created by: Dave Brondsema
Contact: konfidi-devel at lists.sourceforge.net
License Type: Apache License, Version 2.0
Status: Active Updated: Old
Maintained as of: 2020-03-02
Added: 2020-03-02
Available at: http https://github.com/MailCleaner/TesseractOcr
search.cpan.org/perldoc?Mail::SpamAssassin::Plugin::OpenPGP
SVN: http://konfidi.org/wiki/SVN/ (in clients/spamassassin-openpgp/trunk) iXhash2
iXhash2 is an unofficial improved version of iXhash plugin for SpamAssassin, adding async DNS lookups for performance and removing unneeded features. It's fully compatible with the iXhash 1.5.5 (https://sourceforge.net/projects/ixhash/) implementation. It computes MD5 checksums of fragments of the body of an e-mail and compares them to those of know spam using DNS queries to a RBL-like name server.
Created by: Henrik Krohnscrm114
Plugin to use CRM114
Created by: MartinSchuette
Contact: info at mschuette.name
License Type: Apache License, Version 2.0
Status: Active Updated: 2011-03-21
Maintained as of: 2021-04-25
Added: 2021-04-25
Available at: httphttps://mschuettemailfud.nameorg/wp/crm114-spamassassin-plugin/ (crm114.pm and crm114.cf) iXhash2/
Mail::SpamAssassin::Plugin::RedisAWL
redis support for spamassassin AWL/TxRep
Created by: Markus Benning
Contact: https://markusbenning.de/Bayes OCR Plugin
Bayes OCR Plugin performs a Bayesian content analysis of the OCR extracted text to help Spamassassin catch spam messages with attached images.
Created by: PRA Group, DIEE, University of Cagliari (Italy)
Contact: see Bayes OCR Plugin - Project page
License Type: Apache License, Version 2.0
Status: Active Updated: Old
Maintained as of: 2015-06-08
Added: 2015-06-11
Available at: https://metacpan.org/release/Mail-SpamAssassin-Plugin-RedisAWL
Mail::SpamAssassin::Plugin::RuleTimingRedis
collect SA rule timings in redis
Created by: Markus Benning
Contact: https://markusbenning.de/: Bayes OCR Plugin - Project page
Note: (Bayes OCR Plugin is still beta!)Image Cerberus Plugin
Image Cerberus Plugin performs a content analysis of images attached to e-mails by image processing and pattern recognition techniques.
Created by: PRA Group, DIEE, University of Cagliari (Italy) and Ambient Intelligence Lab, Sardegna DistrICT, Sardegna Ricerche (italy)
Contact: see Plugin - Project page
License Type: Apache License, Version 2.0
Status: Active Updated: Old
Maintained as of: 2015-06-08
Added: 2015-06-11
Available at: https://metacpan.org/release/Mail-SpamAssassin-Plugin- Project page
sa2dnsbl
If you want to build your own rbldns System and reuse the Filtering results of Spamassassin this package could be the sollution. It is a UDP based client-server application which reports all spamming IP's to one Server. A worker thread (cronjob) creates the IP list to block. This sollution take use of the rbldns server included in the djbdns distribution.
The package includes three components. The sa2dnsblc Plugin for Spamassassin, the sa2dnsbld Server and finally the sa2dnsblw Worker. Installation instructions are included in sa2dnsbld.pl
Created by: Frank Blechschmitt, FBIS
Contact: http://www.fbis.ch
License Type: Apache License, Version 2.0
Status: Active
Updated: Old
Available at: http://www.fbis.ch/download.php?id=17
Note: The collectd plugin Collectd::Plugins::RedisClient could be used to record counter values.
Botnet
Botnet looks for possible botnet sources of email by checking various DNS values that indicate things such as other ISP's clients or workstations, or misconfigured DNS settings that are more likely to happen with client or workstation addresses than servers. Mirrored for educational purposes with applied patches, as it seems abandonded and nowhere to be found. No other changes are done. As the plugin has some interesting idea's there might be a (partial) rewrite in the future.
Original Author: John Rudd
Maintainer: Thijs Eilander
Contact: via github
License Type: GNU General Public License
Status: Inactive but works fine on 3.4.1
Maintained as of: 2014-11-19
Added: 2015-05-14
Available at: https://github.com/eilandert/Botnet.pm
MTX
A distributed DNS whitelist. (Named after MX records plus the abbreviation "TX" for "transmit".)
Contact: Darxus
License Type: Apache
Status: Active
Maintained as of: 2018-03-02
Added: 2011-08-12Log Scanned Messages
This plugin will write a copy of every mail scanned to the C</tmp/spamassassin_scanned_msgs> directory (creating that dir if it doesn't already exist). This may be very useful when attempting to debug certain error conditions that only manifest with certain input messages.
Created by: Justin Mason
Contact: http://jmason.org
License Type: Apache License, Version 2.0
Status: Active
Updated: Old
Available at: http://taintwww.chaosreigns.orgcom/x/2007/LogScannedMessages.pm
Mail::SpamAssassin::Plugin::Konfidi
For authenticated messages, queries the Konfidi (http://konfidi.org) trust network for a computed inferred trust value of the sender.
Note: as of Jan '08 only Mail::SpamAssassin::Plugin::OpenPGP is supported for auth; SPF and DKIM are planned. Created by: Dave Brondsema
Contact: konfidi-devel at lists.sourceforge.net
License Type: Apache License, Version 2.0
Status: Active
Updated: Old
Available at: http://search.cpan.org/perldoc?Mail::SpamAssassin::Plugin::Konfidi
SVN: http://konfidi.org/wiki/SVN/ (in clients/spamassassin/trunk)
DSPAM
When using dspam in conjuction with SpamAssassin and amavisd-new, amavisd-new automatically has dspam calculate the probabability of a message being HAM/SPAM and then insert headers. If you have SA installed, the dspam information goes to waste. That is unless you take advantage of this plugin.
Created by: Eric Lubow
Contact: eric at lubow dot org
License Type: Same as SpamAssassin
Status: active
Maintained as of: 2011-03-21
Added: 2006-12-08
Available at: http://eric.lubow.org/projects/dspam-spamassassin-plugin/
Note: Using dspam's results, this module adds a tag/token to the message that SA picks up and based on the score you assign it in the ruleset configuration file, it adds/subtracts that score. Read the homepage link for more information.
crm114
Plugin to use CRM114
Created by: MartinSchuette
Contact: info at mschuette.nameFreemail
Checks if message is sent from a "freemail" account. Also checks a specific spam sign, if a message has Reply-To or email mentioned in body pointing to a different freemail account.
Created by: Henrik Krohns
Contact: sa at hege.li
License Type: Apache License, Version 2.0
Status: Active Updated: Old
Maintained as of: 2011-03-21
Added: 2007-04-08
Available at: Integrated in SpamAssassin 3.3 (see links http://sa.hege.li/)
Mail::SpamAssassin::Plugin::CollectTokens
Collects tokens from bayes in a SQL database, making it possible to see what tokens the bayes database contains.
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active
Updated: Old
Available at: http://whatever.frukt.org/spamassassin.text.shtml#CollectTokens.pm
Mail::SpamAssassin::Plugin::p0fOS
Fetches the OS info from a database populated from p0f and inserts it in a header for use in scores and bayes. The database can reside on and/or be populated from a different system (such as a firewall or router).
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active
Updated: Old
Available at: http://whatever.frukt.org/p0fstats.text.shtml#p0fOS.pm
Note: To use you also need the scripts (from the same place as the plugin) and the p0f OS fingerprinting application.
Mail::SpamAssassin::Plugin::MimeMagic
Checks for mismatches between a parts MIME type and its actual content.
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active (experimental)
Updated: Old
Available at: http://whatever.frukt.org/spamassassin.text.shtml#MimeMagic.pm
Note: Some mismatches really aren't, so the plugin can have a map between types that are considered equal.
mschuette.name/wp/crm114-spamassassin-plugin/ (crm114.pm and crm114.cf)
Bayes OCR Plugin
Bayes OCR Plugin performs a Bayesian content analysis of the OCR extracted text to help Spamassassin catch spam messages with attached images.
Created by: PRA Group, DIEE, University of Cagliari (Italy)
Contact: see Bayes OCR Plugin - Project page
License Type: Apache License, Version 2.0
Status: Active
Maintained as of: 2011-03-21
Added: 2007-06-14
Available at: Bayes OCR Plugin - Project page
Note: (Bayes OCR Plugin is still beta!)
Image Cerberus Plugin
Image Cerberus Plugin performs a content analysis of images attached to e-mails by image processing and pattern recognition techniques.
Created by: PRA Group, DIEE, University of Cagliari (Italy) and Ambient Intelligence Lab, Sardegna DistrICT, Sardegna Ricerche (italy)
Contact: see Plugin - Project page
License Type: Apache License, Version 2.0
Status: Active
Maintained as of: 2011-03-21
Added: 2008-08-11
Available at: Plugin - Project page
Mail::SpamAssassin::Plugin::SaveHits
Stores a copy of a message in a dated directory when specific rules are hit and then creates a dated directory for each rule that is hit and creates a symlink to the message file allowing you to quickly find messages on a given date hitting a specific rule. Useful for developing and testing new rules.
Created by: Steve Freegard
Contact: steve.freegard at fsl.com
License Type: Apache
Status: Active
Maintained as of: 2011-03-21
Added: 2009-08-03
Available at: https://github.com/smfreegard/SaveHits
DNSWL spam reporting
Adds DNSWL to the services which receive a report via the command "spamassassin --report" (or -r).
Contact: Darxus
License Type: Apache
Status: Active
Maintained as of: 2018-03-02
Added: 2011-02-21Mail::SpamAssassin::Plugin::HashCount
Counts messages using iXhash/NixSpam like hashes.
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active
Updated: Old
Available at: http://whateverwww.frukt.org/spamassassin.text.shtml#HashCount.pmchaosreigns.com/dnswl/sa_plugin/
Mail::SpamAssassin::Plugin::HeadersToBody
Copies the (decoded) content of specified headers to the decoded/rendered body of a the message object.
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active
Updated: Old
Available at: http://whatever.frukt.org/spamassassin.text.shtml#HeadersToBody.pm
FromNotReplyTo
Compares 'From:' and 'Reply-To:' headers.
Created by: Ronnie Mose
Contact: rm at travelaccommodation dot eu
License Type: Public Domain
Updated: Old
Available at: FromNotReplyTo
http://www.dkim-reputation.org/fileadmin/templates/img/logo.png
LDAPfilter
Mail::SpamAssassin::Plugin::LDAPfilter provides LDAP-based blacklist and whitelist filtering capabilities to SpamAssassin 3.x installs. Standard elements from the SMTP session and the RFC822 message are parsed out and searches are submitted to an LDAP server, and scorable responses are returend for any matches. For example, if a message contains a parseable domain name, the domain name will be used as a search key against the LDAP filters, and if a match is found the plugin will return a scorable marker, which could either be positive (blacklist) or negative (whitelist).
Created by: Eric A. Hall
Contact: ehall@ntrg.com
License Type: Same as SpamAssassin
Status: ongoing maintenance, some development
Maintained as of: 2011-01-01
Added: 2005-05-24
Available at: http://www.eric-a-hall.com/software/spamassassin-ldapfilter/
SAGrey
SAGrey is a two-phased greylist tool for use inside spamassassin. It first looks to see if the score of the current message exceeds the current "spam" threshold value, and if so then it looks to see if the message sender's email and IP address tuple are already known to the auto-whitelist (AWL) repository. If the message exceeds the spam score and the sender is unknown to spamassassin, SAGrey assumes that this is one-time spam from a throwaway or zombie account, and fires accordingly.
This is badly named, as it does not actually do greylisting.
Created by: Eric A. Hall
Contact: eric.hall@gmail.com
License Type: Same as SpamAssassin
Status: ongoing maintenance, some development
Maintained as of: 2011-01-01
Added: 2005-08-21 DKIM Reputation Plugin
Replacement of the DKIM.pm plugin with additional inclusion of reputation data from www.dkim-reputation.org. This aids especially to block known spam accounts at freemailers and spammers sending DKIM signed spam with their own domains. Additionally positive reputation will be used in the future to reduce the false positive problem (positive scoring can be disabled). Currently an appropriate ruleset to distinct between neutral and good reputation is elaborated, feedback is welcome.
Requires SpamAssassin 3.1.2+
Created by: Florian Sager
Contact: http://www.dkim-reputation.org
License Type: Apache License, Version 2.0
Status: active
Updated: Old
Available at: http://www.dkimeric-a-reputationhall.orgcom/software/spamassassin-sagrey/
SA_CDO
Plugin for Micosoft Exchange server that communicates with a local or remote spamd deamon. Processes the mail depending on the spam score and the plugin configuration.
Created by: Robin Aerts
Contact: robin.aerts@muziekcentrum.be
License Type: (license)
Status: active
Updated: Old
Available at: http://sourceforge.net/project/showfiles.php?group_id=250443
Mail::SpamAssassin::Plugin::URLRedirect
Follows specified URLs to see if they redirect. If they do redirect, the new location is added to the message meta-data, and redirection depth can be tested with eval test.
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active
Updated: Old
Available at: http://whatever.frukt.org/spamassassin.text.shtml#URLRedirect.pm
Mirror: http://mmm.truls.org/m/ExtractText.zip
Commercial Plugins
Spamhaus Data Query Service Plugin for SpamAssassin
This plugin allows to get the most out of a Spamhaus Data Query Service (DQS) subscription.
Subscriptions operates on a "free for most" way, in the sense that if you meet the "Free use" restrictions listed here you are eligible for a free DQS key that you can register at https://www.spamhaustech.com/dqs/
DQS offer an increase of up to 42% in spam catch rate compared to Rsync or our public mirrors, as the Virus Bulletin test we routinely carry will show: https://www.virusbulletin.com/testing/results/latest/vbspam-email-security
Created by: Spamhaus Technology - Spamassassin Team
Contact: https://www.spamhaustech.com/
License Type: Apache License, Version 2.0
Status: Active
Maintained as of: 2019-06-25
Added: 2019-06-25 (date this entry was added)
Available at: https://docs.spamhaustech.com/40-real-world-usage/SpamAssassin/020-SpamAssassin.html
Note: Periodically tested by https://www.virusbulletin.com/testing/vbspam/
Commtouch Plug-in for SpamAssassin
Commtouch offers a SpamAssassin plug-in for its Anti-Spam and Zero-Hour Virus Outbreak Protection technologies. Messages are passed to the Commtouch engine and the results are converted into SpamAssassin scores. Embedding the Commtouch technology allows existing SpamAssassin systems to simultaneously increase accuracy and decrease the amount of resources required for maintenance, with an easy and fast integration effort.
Commtouch SA-Plugin — The Commtouch Plug-In is a quick, easy way to inoculate SpamAssassinprotected mail servers against zero-hour threats, and to beef up detection against zombie or botnet-generated spam.
Created by: Commtouch Software Ltd.
Contact: Gabriel.Mizrahi at Commtouch dot com
License Type: Commercial annual subscription
Status: Active
Maintained as of: 2011-03-23
Added: 2008-09-09Mail::SpamAssassin::Plugin::ExtractText
Uses plugin extractors and/or external tools to extract text from message parts. Extractor plugins can extract parts that will be fed into the plugin for checking, so for example a an image OCR extractor could get to check images extracted from a PDF by another extractor. How to extract what from what is very configurable. Included are configs for MS Word, RTF, OpenDocument and PDF files, and a very simplistic OpenXML plugin.
Created by: Jonas Eckerman
Contact: jonas@frukt.org
License Type: Public Domain
Status: active
Updated: Old
Available at: http://whateverwww.fruktcommtouch.org/spamassassin.text.shtml#ExtractText.pm
Mirror: http://mmm.truls.org/m/ExtractText.zip
Mail::SpamAssassin::Plugin::SaveHits
Stores a copy of a message in a dated directory when specific rules are hit and then creates a dated directory for each rule that is hit and creates a symlink to the message file allowing you to quickly find messages on a given date hitting a specific rule. Useful for developing and testing new rules.
Created by: Steve Freegard
Contact: steve.freegard at fsl.com
License Type: Apache
Status: Active
Updated: Old
Available at: http://www.fsl.com/support/SaveHits.pm
com/Site/Products/SpamAssassin.asp
PhishPatrolTM by Wombat Security Technologies, Inc.
PhishPatrolTM is a dedicated Anti-Phishing email Plug-in that will significantly boost the performance of your SpamAssassin installation, enabling you to catch many of the spear-phishing emails and zero-hour phishing emails that would otherwise go undetected. PhishPatrolTM is the product of years of research at the world-renowned School of Computer Science at Carnegie Mellon University. It relies on proprietary machine learning techniques and a proprietary set of features to complement your existing anti-spam/anti-virus installation. PhishPatrolTM is backed by a dedicated team of researchers working relentlessly to ensure that their filter keeps up with the latest threats. As a SpamAssassin plug-in, PhishPatrolTM integrates seamlessly with your existing installation of SpamAssassin. For additional information, contact info@wombatsecurity.com.
Created by: Wombat Security Technologies, Inc.
Contact: sales at wombatsecurity dot com
License type: Commercial annual subscription
Status: Active
Maintained as of: 2011-04-01
Added: 2008-10-20Mail::SpamAssassin::Plugin::DecodeShortURLs
Decodes shortened URLs via HTTP HEAD request to the shortening service and adds the decoded URL into the list of URIs extracted by SpamAssassin for other plugins to find (e.g. URIDNSBL).
Created by: Steve Freegard
Contact: steve.freegard at fsl.com
License Type: Apache
Status: Active
Updated: Old
Available at: http://www.fsl.com/support/DecodeShortURLs.pm and http://www.fsl.com/support/DecodeShortURLs.cf wombatsecurity.com
SNF4SA - Message Sniffer Antispam Plugin for SpamAssassin
The Message Sniffer Antispam Plugin for SpamAssassin combines a real-time collaborative IP reputation system, distributed competitive machine learning technologies, and a comprehensive content analysis engine that improves both the accuracy and speed of SpamAssassin without additional tuning.
Created by: ARM Research Labs, LLC
Contact: http://www.armresearch.com/company/contactUs.jsp
License Type: Commercial Subscription
Status: Active
Maintained as of: 2012-02-20
Added: 2009-05-12
DNSWL spam reporting
Adds DNSWL to the services which receive a report via the command "spamassassin --report" (or -r).
Contact: Darxus
License Type: Apache
Status: Active
Updated: 2011-03-20
Available at: http://www.chaosreignsarmresearch.com/dnswl/sa_plugin/products/SNF4SA.jsp
Format for new entries
Suggested format (a la CustomRulesets format):
name-of-plugin
(brief description goes here)
Created by: (name)
Contact: (contact addr)
License Type: (license)
Status: Active / Locked / Defunct (see above) Updated
Maintained as of: YYYY-MM-DD
Added: YYYY-MM-DD (date this entry was updatedadded)
Available at: (url)
Mirror: (if applicable)
Note: (any extra notes)
Sample Results: (mass-check results if available)CategorySoftware CategorySoftware