// Archive
Category: Antispam
Spam filtering and anti-spam tooling: Rspamd, SpamAssassin, KAM.cf rules, and mail-flow scoring.
Olefy and rspamd: scan Office macro malware in your mail
Olefy lets rspamd run oletools against Office attachments to catch VBA-macro malware. Here is how it works, where stock olefy falls over under load, and how olefied makes it survive a real mail stream.
YARA malware scanning in Rspamd: unwrap malicious mail
YARA malware scanning in Rspamd unpacks OLE, VBA, PDFs and nested attachments before detection rules inspect the dangerous bits.
DCC, Razor and Pyzor for Rspamd: One Docker Backend
Run DCC, Razor and Pyzor for rspamd from one token-authed Docker backend that never blocks the scanner and never writes your mail to disk. Here is how the shim works and why it looks the way it does.
KAM.cf in Rspamd: 3,200 SpamAssassin Rules, Native Lua, No Perl
KAM.cf is 3,200+ SpamAssassin rules. Loading it through Rspamd compat mode drags the whole Perl engine along. Here is the converter that transpiles it to native Rspamd Lua instead.