Christopher Kunz wrote:
> BTW: What kind of header is this?
>
> X-Ki: <Y2hyaXMwNDAyQGRlLXB1bmt0LmRl>
>
> --ck


That's a fake header name with your e-mail address encoded with base64.

Un-base64 that and you get:
[EMAIL PROTECTED]
I munged most of it for your protection, but having that encoding here is
enough to give your address to a few people ;)


Add the following rule to your local.cf and you will never see those again
;)

# Custom rule to catch spammers using base64 encoding of my domain.
header     FVGT_BASE64_MYDOMAIN   ALL =~
/(?:BkZS1wdW5rdC5kZQ==|AZGUtcHVua3QuZGU=|QGRlLXB1bmt0LmRl)/
describe   FVGT_BASE64_MYDOMAIN   Message hides my domain with Base64
encoding
score      FVGT_BASE64_MYDOMAIN   5.0
This is custom for your domain of xx-xxxxx.de I have a script to
auto-produce these rules for me ;)



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to