Keyword based custom subject warning

[Matus UHLAR - fantomas]

>* Danilo Godec <danilo.godec at agenda.si>:
>> apparently, our users are receiving emails containing links and /or
>> references to various publications, some of which are considered
>> 'predatory'. Emails usually contain ISSN (International Standard Serial
>> Number) and the idea is to scan the body of an email for the ISSN and if it
>> matches one on the 'blacklist', the subject of the email should be prepended
>> with some specific warning (other than ***SPAM***).
>>
>> We're already using Amavisd-new on our inbound SMTP server, so I wonder if
>> that would be possible with it?

On 07.03.22 11:49, Patrick Ben Koetter wrote:
>it is not possible as of now. Your best guess is probably to look for other
>MILTER applications that let you scan a messages body and trigger an action,
>such as changing the Subject:-header.

I was tinking if this could be solved using clamav with YARA rule that would 
detect such ISSN and report it, probably with virus_name_to_spam_score_maps
?

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"One World. One Web. One Program." - Microsoft promotional advertisement
"Ein Volk, ein Reich, ein Fuhrer!" - Adolf Hitler