Salut,
Din cand in cand, in functie de timp ma mai bat cu spammerii, asa ca m-am tot jucat cu optiuni in postfix sa blocheze milioanele alea de mailuri de angajare care vin bulk la intervale regulate de timp. Pe langa asta, de mai multa vreme am trecut in bind SPF pe modul strict (-all), ca sa elimin multe din spamurile care vin de la mine catre mine (de la domeniul meu catre el insusi). Acum, uitandu-ma in folderul de spam, vad ca au trecut destule mailuri de genul asta, pe motivul ca au definite in headere campuri "Return-Path" care nu fac parte din domeniul meu. Ca sa fiu mai explicit, headerele arata asa: Return-Path: <[email protected]> Delivered-To: [email protected] Received: from localhost (localhost [127.0.0.1]) by mail.geniusnet.ro (Postfix) with ESMTP id 49676160646 for <[email protected]>; Tue, 26 Feb 2013 15:16:03 +0200 (EET) X-Virus-Scanned: amavisd-new at geniusnet.ro X-Spam-Flag: YES X-Spam-Score: 14.567 X-Spam-Level: ************** X-Spam-Status: Yes, score=14.567 required=4.25 tests=[BAYES_50=0.8, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, KB_DATE_CONTAINS_TAB=2.751, KB_FAKED_THE_BAT=2.694, RDNS_NONE=0.793, TAB_IN_FROM=0.375, T_FILL_THIS_FORM_SHORT=0.01, URIBL_BLACK=1.725, URIBL_DBL_SPAM=1.7, URIBL_JP_SURBL=1.25, URIBL_PH_SURBL=0.61, URIBL_WS_SURBL=1.608] autolearn=spam Received: from mail.geniusnet.ro ([127.0.0.1]) by localhost (cc.geniusnet.ro [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 3hxR54tFV+cW for <[email protected]>; Tue, 26 Feb 2013 15:15:56 +0200 (EET) Received-SPF: none (yahoo.nl: No applicable sender policy available) receiver=ns.geniusnet.ro; identity=mailfrom; envelope-from="[email protected]"; helo="[181.241.31.249]"; client-ip=181.241.31.249 Received: from [181.241.31.249] (unknown [181.241.31.249]) by mail.geniusnet.ro (Postfix) with ESMTP id 093A516063D for <[email protected]>; Tue, 26 Feb 2013 15:15:54 +0200 (EET) Received: from [164.2.139.33] (helo=jwwitgdndjdtao.blkhkaprybabpoh.com) by with esmtpa (Exim 4.69) (envelope-from ) id 1MMYG3-4409dt-8Z for [email protected]; Tue, 26 Feb 2013 08:15:55 -0500 Date: Tue, 26 Feb 2013 08:15:55 -0500 From: <[email protected]> X-Mailer: The Bat! (v2.00.6) Personal X-Priority: 3 (Normal) Message-ID: <[email protected]> To: <[email protected]> Subject: [SPAM] Employyment you've been searching! MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit Deci la campul "Received-SPF" spune ca a verificat domeniul yahoo.nl in loc de geniusnet.ro, si asta pentru ca exista acel "Return-Path". Dar nu mi se pare logic, nu ar trebui sa verifice domeniul din campul "From"? -- Catalin Bucur _______________________________________________ RLUG mailing list [email protected] http://lists.lug.ro/mailman/listinfo/rlug
