Bug 7923

Summary: RFE: Making HashBL email_whitelist a configurable feature
Product: Spamassassin Reporter: Lars <lars.einarsen>
Component: PluginsAssignee: SpamAssassin Developer Mailing List <dev>
Status: RESOLVED FIXED    
Severity: enhancement CC: apache, billcole, lars.einarsen
Priority: P3    
Version: 3.4.6   
Target Milestone: 4.0.0   
Hardware: PC   
OS: Linux   
Whiteboard:

Description Lars 2021-08-18 10:23:05 UTC
The HashBL plugin email_whitelist regex is hitting common address patterns used in phish emails. Making the email_whitelist an configurable option would be appreciated.

From the plugin:

my $VERSION = 0.101;
[...]
$self->{email_whitelist} = qr/
    ^(?:
        abuse|support|sales|info|helpdesk|contact|kontakt
      | (?:post|host|domain)master
      | undisclosed.*                     # yahoo.com etc(?)
      | request-[a-f0-9]{16}              # live.com
      | bounced?-                         # yahoo.com etc
      | [a-f0-9]{8}(?:\.[a-f0-9]{8}|-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}) # gmail msgids?
      | .+=.+=.+                          # gmail forward
    )\@
  /xi;
Comment 1 Henrik Krohns 2022-03-06 11:50:23 UTC
Implemented new configs which override default regexes

hashbl_email_regex
hashbl_email_whitelist

Sending        trunk/lib/Mail/SpamAssassin/Plugin/HashBL.pm
Transmitting file data .done
Committing transaction...
Committed revision 1898649.