Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Please add links to third-party SA plugins to the bottom of this page. Note that only SpamAssassin 3.0.0 or later can use these. To use these, just place the file(s) in /etc/mail/spamassassin your SpamAssassin plugin directory, which may be /usr/share/perl5/Mail/SpamAssassin/Plugin/ (if you use spamd, be sure to restart); SpamAssassin will need at least 1 rule file (ending in .cf) to load the plugin, and that will typically use a loadplugin line to load a .pm file containing the plugin's perl code.

Table of Contents

FYI: The You can also keep the plugin's .pm file can be kept in your /etc/mail/spamassassin/ or /etc/spamassassin, too./ directory, but you need to specify the plugin's file name as the second argument to loadplugin. For example, a plugin named Mail::SpamAssassin::Plugin::MyPlugin with a filename of myplugin.pm:
loadplugin Mail::SpamAssassin::Plugin::MyPlugin myplugin.pm

Table of Contents

Before running these plugins please do the following:

  1. Read any extra info available with the plugins, including the comments in the .cf files, or the POD documentation in the .pm file.
  2. Check to make sure that the default scores fit your installation. You might want to modify scores.
  3. Make sure to --lint the rules after loading them.
  4. Test the new plugin. Keep an eye on hits from the new rules to determine if the scoring is right for you.

Use at your own risk. These plugins are not generally audited for security, performance or compatibility for any specific SpamAssassin version.

Status Information

Active: Plugin is actively updated and maintained

...

Plugins without a recent "Maintained as of:" date have been moved to UnmaintainedCustomPlugins. If you own one, or have confirmed that it is currently usable, feel free to move it back here and update that field.

Free Plugins

Mail::SpamAssassin::Plugin::AttachmentDetail

SpamAssassin plugin to check attachment details

Created by: Kent Oyer

License Type: ?

Status: Active

Maintained as of: 2023-05-18

Added: 2023-05-18

Available at: https://github.com/mxguardian/Mail-SpamAssassin-Plugin-AttachmentDetail

Mail::SpamAssassin::Plugin::ASCII

SpamAssassin plugin to convert non-ASCII characters to their ASCII equivalents

Created by: Kent Oyer

License Type: ?

Status: Active

Maintained as of: 2023-05-12

Added: 2023-05-12

Available at: https://github.com/mxguardian/Mail-SpamAssassin-Plugin-ASCII

Mail::SpamAssassin::Plugin::PDFInfo2

Improved PDF Plugin for SpamAssassin

Created by: Kent Oyer

License Type: ?

Status: Active

Maintained as of: 2023-01-26

Added: 2023-01-26

Available at: https://github.com/mxguardian/Mail-SpamAssassin-Plugin-PDFInfo2

Mail::SpamAssassin::Plugin::Esp

SpamAssassin plugin for Invaluement.com Service Provider DNSBLs ("SPBL")

Created by: Giovanni Bechis

License Type: Apache License, Version 2.0

Status: Active

Maintained as of: 2020-08-23

Added: 2020-09-09

Available at: https://github.com/bigio/spamassassin-esp

Mail::SpamAssassin::Plugin::ClamAV

Virus check using Clamav antivirus

Created by: Giovanni Bechis

License Type: Apache License, Version 2.0

Status: Active

Maintained as of: 2020-01-18

Added: 2020-06-04

Available at: https://github.com/bigio/spamassassin-clamav

TesseractOCR

Image scanning with Tesseract OCR engine

Created by: MailCleaner / Fastnet SA

License Type: Apache License, Version 2.0

Status: Active

Maintained as of: 2020-03-02

Added: 2020-03-02

Available at: https://github.com/MailCleaner/TesseractOcr

Mail::SpamAssassin::Plugin::iXhash2

iXhash2 is an unofficial improved version of iXhash plugin for SpamAssassin, adding async DNS lookups for performance and removing unneeded features. It's fully compatible with the iXhash 1.5.5 (https://sourceforge.net/projects/ixhash/) implementation. It computes MD5 checksums of fragments of the body of an e-mail and compares them to those of know spam using DNS queries to a RBL-like name server.

Created by: Henrik Krohns

License Type: Apache License, Version 2.0

Status: Active

Maintained as of: 2021-04-25

Added: 2021-04-25

Available at: https://mailfud.org/iXhash2/

Mail::SpamAssassin::Plugin::RedisAWL

redis support for spamassassin AWL/TxRep

Created by: Markus Benning

Contact: https://markusbenning.de/

License Type: Apache License, Version 2.0

Status: Active

Maintained as of: 2015-06-08

Added: 2015-06-11

Available at: https://metacpan.org/release/Mail-SpamAssassin-Plugin-RedisAWL

Mail::SpamAssassin::Plugin::RuleTimingRedis

collect SA rule timings in redis

Created by: Markus Benning

Contact: https://markusbenning.de/

License Type: Apache License, Version 2.0

Status: Active

Maintained as of: 2015-06-08

Added: 2015-06-11

Available at: https://metacpan.org/release/Mail-SpamAssassin-Plugin-RuleTimingRedis

Note: The collectd plugin Collectd::Plugins::RedisClient could be used to record counter values.

Botnet

Botnet looks for possible botnet sources of email by checking various DNS values that indicate things such as other ISP's clients or workstations, or misconfigured DNS settings that are more likely to happen with client or workstation addresses than servers. Mirrored for educational purposes with applied patches, as it seems abandonded and nowhere to be found. No other changes are done. As the plugin has some interesting idea's there might be a (partial) rewrite in the future.

Original Author: John Rudd

Maintainer: Thijs Eilander

Contact: via github

License Type: GNU General Public License

Status: Inactive but works fine on 3.4.1

Maintained as of: 2014-11-19

Added: 2015-05-14

Available at: https://github.com/eilandert/Botnet.pm

MTX

A distributed DNS whitelist. (Named after MX records plus the abbreviation "TX" for "transmit".)

Contact: Darxus

License Type: Apache

Status: Active

Maintained as of: 2018-03-02

Added: 2011-08-12

Available at: http://www.chaosreigns.com/mtx/

DSPAM

When using dspam in conjuction with SpamAssassin and amavisd-new, amavisd-new automatically has dspam calculate the probabability of a message being HAM/SPAM and then insert headers. If you have SA installed, the dspam information goes to waste. That is unless you take advantage of this plugin.

...

Added: 2009-08-03

Available at: https://github.com/smfreegard/SaveHits

DNSWL spam reporting

Adds DNSWL to the services which receive a report via the command "spamassassin --report" (or -r).

Contact: Darxus

License Type: Apache

Status: Active

Maintained as of: 2018-03-02

Added: 2011-02-21

Available at: http://www.fslchaosreigns.com/dnswl/support/SaveHits.pmsa_plugin/

Mail::SpamAssassin::Plugin::DecodeShortURLs

Decodes shortened URLs via HTTP HEAD request to the shortening service and adds the decoded URL into the list of URIs extracted by SpamAssassin for other plugins to find (e.g. URIDNSBL).

Created by: Steve Freegard

Contact: steve.freegard at fsl.com

License Type: Apache

LDAPfilter

Mail::SpamAssassin::Plugin::LDAPfilter provides LDAP-based blacklist and whitelist filtering capabilities to SpamAssassin 3.x installs. Standard elements from the SMTP session and the RFC822 message are parsed out and searches are submitted to an LDAP server, and scorable responses are returend for any matches. For example, if a message contains a parseable domain name, the domain name will be used as a search key against the LDAP filters, and if a match is found the plugin will return a scorable marker, which could either be positive (blacklist) or negative (whitelist).

Created by: Eric A. Hall

Contact: ehall@ntrg.com

License Type: Same as SpamAssassin

Status: ongoing maintenance, some development

Maintained as of: 2011-01-01

Added: 2005-05-24

Available at: http://www.eric-a-hall.com/software/spamassassin-ldapfilter/

SAGrey

SAGrey is a two-phased greylist tool for use inside spamassassin. It first looks to see if the score of the current message exceeds the current "spam" threshold value, and if so then it looks to see if the message sender's email and IP address tuple are already known to the auto-whitelist (AWL) repository. If the message exceeds the spam score and the sender is unknown to spamassassin, SAGrey assumes that this is one-time spam from a throwaway or zombie account, and fires accordingly.

This is badly named, as it does not actually do greylisting.

Created by: Eric A. Hall

Contact: eric.hall@gmail.com

License Type: Same as SpamAssassin

Status: ongoing maintenance, some developmentStatus: Active

Maintained as of: 2011-0301-21 01

Added: 20102005-0908-17 21

Available at: http://www.fsleric-a-hall.com/software/support/DecodeShortURLs.pm and httpspamassassin-sagrey/

Commercial Plugins

Spamhaus Data Query Service Plugin for SpamAssassin

This plugin allows to get the most out of a Spamhaus Data Query Service (DQS) subscription.
Subscriptions operates on a "free for most" way, in the sense that if you meet the "Free use" restrictions listed here you are eligible for a free DQS key that you can register at https://www.fslspamhaustech.com/supportdqs/DecodeShortURLs.cf

DNSWL spam reporting

Adds DNSWL to the services which receive a report via the command "spamassassin --report" (or -r).

DQS offer an increase of up to 42% in spam catch rate compared to Rsync or our public mirrors, as the Virus Bulletin test we routinely carry will show: https://www.virusbulletin.com/testing/results/latest/vbspam-email-security

Created by: Spamhaus Technology - Spamassassin Team

Contact: https://www.spamhaustech.com/Contact: Darxus

License Type: Apache License, Version 2.0

Status: Active

Maintained as of: 20112019-0306-20 25

Added: 2019-06-25 (date this entry was added)

Available at: httphttps://wwwdocs.chaosreignsspamhaustech.com/dnswl/sa_plugin/

Commercial Plugins

40-real-world-usage/SpamAssassin/020-SpamAssassin.html

Note: Periodically tested by httpshttp://www.commtouchvirusbulletin.com/sites/all/themes/commtouch/images/commtouch-logo.giftesting/vbspam/

Commtouch Plug-in for SpamAssassin

...

Available at: http://www.commtouch.com/Site/Products/SpamAssassin.asphttp://wombatsecurity.com/static/Wombat_sa.png

PhishPatrolTM by Wombat Security Technologies, Inc.

PhishPatrolTM is an email filter from Wombat Security Technologies designed specifically to identify email-based phishing attacks before they can lure users into divulging personal information. In contrast to solutions that rely solely on blacklists and email signatures, the PhishPatrolTM email filter uses advanced machine learning to catch new phishing attacks from the very start. Extensive evaluation of PhishPatrolTM has shown that it consistently catches more phish than the best email spam filters and has far fewer false positivesa dedicated Anti-Phishing email Plug-in that will significantly boost the performance of your SpamAssassin installation, enabling you to catch many of the spear-phishing emails and zero-hour phishing emails that would otherwise go undetected. PhishPatrolTM is the product of years of research at the world-renowned School of Computer Science at Carnegie Mellon University. It relies on proprietary machine learning techniques and a proprietary set of features to complement your existing anti-spam/anti-virus installation. PhishPatrolTM is backed by a dedicated team of researchers working relentlessly to ensure that their filter keeps up with the latest threats. As a SpamAssassin plug-in, PhishPatrolTM integrates seamlessly with your existing installation of SpamAssassin. PhishPatrolTM — Powerful phishing detection from the makers of PhishGuru and Anti-Phishing Phil. For additional information, contact info@wombatsecurity.com.

Created by: Wombat Security Technologies, Inc.

...

Available at: http://wombatsecurity.com

SNF4SA - Message Sniffer TM Antispam Plugin for SpamAssassin

...

Status: Active

Maintained as of: 20112012-0302-21 20

Added: 2009-05-12

Available at: http://www.armresearch.com/products/SNF4SA.jsp

...

Sample Results: (mass-check results if available)CategorySoftware CategorySoftware