phil89 wrote:
Hi
We receive some mails with EuroPharmacie
How could i avoid theses
SCORE is only 5.9
Regards
Philippe
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: by mail.xxxxx.fr (Postfix, from userid 513)
id E1BD5E8D3; Fri, 20 Jun 2008 14:30:39 +0200 (CEST)
X-Spam-Checker-Version: SpamAssassin 3.x.x (2007-02-13) on mail.infodev.fr
X-Spam-Level: *****
X-Spam-Status: No, score=5.9 required=6.2 tests=BAYES_50,HTML_MESSAGE,
MR_NOT_ATTRIBUTED_IP,RCVD_IN_DYNABLOCK,RCVD_IN_SORBS,RCVD_IN_SORBS_DUL,
URIBL_SBL autolearn=no version=3.x.x
Received: from host121-166-dynamic.21-79-r.retail.telecomitalia.it
(host121-166-dynamic.21-79-r.retail.telecomitalia.it [79.21.166.121])
by mail.infodev.fr (Postfix) with ESMTP
id DBDF6E8CE; Fri, 20 Jun 2008 14:30:33 +0200 (CEST)
In addition to what has already been said, the sending host was listed
on CBL at 13:00 that day.
http://cbl.abuseat.org/lookup.cgi?ip=79.21.166.121&.submit=Lookup
Even if it was not, you may want to block
/^host.*dynamic\..*\.relail\.telecomitalia\.it$/
in your postfix with a check_client_access and/or with a check_helo_access.
Did anybody see ham coming out of *.retail.telecomitalia.it?
[snip]