1Mail::SpamAssassin::PluUgsienr::CPohnitsrhiibnugt(e3d)PMearill:D:oScpuammeAnstsaatsisoinn::Plugin::Phishing(3)
2
3
4

NAME

6       Mail::SpamAssassin::Plugin::Phishing - check uris against phishing feed
7

SYNOPSIS

9         loadplugin Mail::SpamAssassin::Plugin::Phishing
10
11         ifplugin Mail::SpamAssassin::Plugin::Phishing
12           phishing_openphish_feed /etc/mail/spamassassin/openphish-feed.txt
13           phishing_phishtank_feed /etc/mail/spamassassin/phishtank-feed.csv
14           phishing_phishstats_feed /etc/mail/spamassassin/phishstats-feed.csv
15           body     URI_PHISHING      eval:check_phishing()
16           describe URI_PHISHING      Url match phishing in feed
17         endif
18

DESCRIPTION

20       This plugin finds uris used in phishing campaigns detected by
21       OpenPhish, PhishTank or PhishStats feeds.
22
23       The Openphish free feed is updated every 6 hours and can be downloaded
24       from https://openphish.com/feed.txt.
25
26       The PhishTank free feed is updated every 1 hours and can be downloaded
27       from http://data.phishtank.com/data/online-valid.csv.  To avoid
28       download limits a registration is required.
29
30       The PhishStats feed is updated every 90 minutes and can be downloaded
31       from https://phishstats.info/phish_score.csv.
32

ADMIN PREFERENCES

34       The following options can be used in site-wide ("local.cf")
35       configuration files to customize how the module handles phishing uris
36
37       phishing_openphish_feed
38           Absolute path of the downloaded OpenPhish datafeed.
39
40       phishing_phishtank_feed
41           Absolute path of the downloaded PhishTank datafeed.
42
43       phishing_uri_noparam ( 0 | 1 ) (default: 0)
44           If this option is set uri parameters will not be take into
45           consideration when parsing the phishing uris datafeed.  If this
46           option is enabled and the url without parameters is "generic" (like
47           https://www.kisa.link/url_redirector.php?url=...) the url will be
48           skipped.
49
50       phishing_phishstats_feed
51           Absolute path of the downloaded PhishStats datafeed.
52
53       phishing_phishstats_minscore ( 0 - 10 ) (default: 6)
54           Minimum score to take into consideration for phishing uris
55           downloaded from PhishStats datafeed.
56
57
58
59perl v5.36.0                      2023-0M1a-i2l1::SpamAssassin::Plugin::Phishing(3)
Impressum