On 28 Feb 2019, at 8:43, Emanuel wrote:
Hello,
due to email accounts compromised by viruses, I have created filters
for the subject of these malicious emails
/^Subject: Your Amazon\.co\.uk order \#[0-9]*$/ DISCARD
Side note: REJECT is a better choice than DISCARD, unless you're doing
t
Greetings, Emanuel!
> Oh, my God, as I said before, email accounts are compromised by
> viruses, they use them to send SPAM from my server, in this case they
> use PHP Mailer or any other application to make bulk mail.
So block these accounts until they sort their crap out.
--
With
On Thu, 28 Feb 2019 at 15:04, Varadi Gabor wrote:
>
> 2019. 02. 28. 15:48 keltezéssel, Emanuel írta:
> > Your Amazon.co.uk order #
>
>
> ^Subject: =?UTF-8?B?WW91ciBBbWF6b24uY28udWsgb3JkZXIgIw/ DISCARD
Or use Spamassassin
Emanuel skrev den 2019-02-28 15:49:
Feb 28 11:32:36 smarthost02-ded postfix/smtpd[519]: D6D24802716B:
client=vps-1578111-x.dattaweb.com[66.97.36.75]
this is not a system user spamming
more help post postconf -n
i stop here
2019. 02. 28. 15:48 keltezéssel, Emanuel írta:
Your Amazon.co.uk order #
^Subject: =?UTF-8?B?WW91ciBBbWF6b24uY28udWsgb3JkZXIgIw/ DISCARD
--
[Varadi Gabor]
Feb 28 11:32:36 smarthost02-ded postfix/smtpd[519]: D6D24802716B:
client=vps-1578111-x.dattaweb.com[66.97.36.75]
Feb 28 11:32:36 smarthost02-ded postfix/cleanup[32709]: D6D24802716B:
warning: header From: =?UTF-8?B?QW1hem9uLmNvLnVr?=
from
vps-1578111-x.dattaweb.com[66.97.36.75];
from=
to= pr
El 28/2/19 a las 11:41, Benny Pedersen escribió:
Emanuel skrev den 2019-02-28 15:33:
/^Subject: Your Amazon\.co\.uk order \#[0-9]*$/ DISCARD
try this in milter-regex
=?UTF-8?B?WW91ciBBbWF6b24uY28udWsgb3JkZXIgIzM2Njg1MDk2Nw==?=
try do this one in postfix regex
The ID within the subje
Emanuel skrev den 2019-02-28 15:33:
/^Subject: Your Amazon\.co\.uk order \#[0-9]*$/DISCARD
try this in milter-regex
=?UTF-8?B?WW91ciBBbWF6b24uY28udWsgb3JkZXIgIzM2Njg1MDk2Nw==?=
try do this one in postfix regex
if all fails you will need to learn clamav
Emanuel skrev den 2019-02-28 15:16:
Oh, my God, as I said before, email accounts are compromised by
viruses, they use them to send SPAM from my server, in this case they
use PHP Mailer or any other application to make bulk mail.
if you do not plan to help, do not answer
El 28/2/19 a las 11:11, B
The computer or mobile device of my clients are affected by viruses and
their data is stolen and then use their email accounts to send phishing.
I have created filters for the subject of these malicious emails
/^Subject: Your Amazon\.co\.uk order \#[0-9]*$/ DISCARD
Now, I see that these mal
Oh, my God, as I said before, email accounts are compromised by viruses,
they use them to send SPAM from my server, in this case they use PHP
Mailer or any other application to make bulk mail.
if you do not plan to help, do not answer
El 28/2/19 a las 11:11, Bastian Blank escribió:
You have a
On Thu, Feb 28, 2019 at 11:08:46AM -0300, Emanuel wrote:
> From: =?UTF-8?B?QW1hem9uLmNvLnVr?=
>
> Subject: =?UTF-8?B?WW91ciBBbWF6b24uY28udWsgb3JkZXIgIzk3NDg1MzgxMg==?=
> Message-ID: <5a18a03d6412f75876d9ab706b99f5f4@localhost.localdomain>
> X-Mailer: PHPMailer 5.3.5
You have an open PHPMail
example:
From: =?UTF-8?B?QW1hem9uLmNvLnVr?=
Subject: =?UTF-8?B?WW91ciBBbWF6b24uY28udWsgb3JkZXIgIzk3NDg1MzgxMg==?=
Message-ID: <5a18a03d6412f75876d9ab706b99f5f4@localhost.localdomain>
X-Mailer: PHPMailer 5.3.5
El 28/2/19 a las 11:05, Emanuel escribió:
In these emails not use the domain "
In these emails not use the domain "amazon.com" so I need to block by
subject but it is encoded in utf8.
Asunto:
Your Amazon.co.uk order #974853812
De:
Amazon.co.uk
Fecha:
28/2/19 10:53
the from field changes all the time because they falsify it
El 28/2/19 a las 10:55, John Peach escribió:
O
On 2/28/19 8:51 AM, Emanuel wrote:
it's not what I need thanks.
El 28/2/19 a las 10:45, Bastian Blank escribió:
ou block the users sending them.
It probably is - legitimate Amazon email comes from servers in
amazonses.com - block email purporting to be from Amazon if the server
is not in th
it's not what I need thanks.
El 28/2/19 a las 10:45, Bastian Blank escribió:
ou block the users sending them.
--
On Thu, Feb 28, 2019 at 10:43:20AM -0300, Emanuel wrote:
> How can I discard these emails if they are encoded? yes or if I need to
> create a regular expression for the ID in to the subject.
You block the users sending them.
Bastian
--
To live is always desirable.
-- Eleen the C
17 matches
Mail list logo
