Philippe Couas wrote:
Hi,
How could i avoid theses spam ?
i have replace my company name by 'societe'
Block it in your postfix. here are some hints (that you may or may not
be able to use):
- its helo is not fqdn. so it can be blocked by
reject_non_fqdn_helo_hostname
- the PTR for the client is
host53-238-dynamic.0-79-r.retail.telecomitalia.it. if you have a recent
postfix, you can use check_reverse_client_hostname_access to block
clients witha PTR matching
.telecomitalia.it
or if you don't want to block the whole domain,
/\d[-\.]\d.*.telecomitalia\.it$/
(pcre style).
Otherwise, just train Bayes (with BAYES_99, you would have cought it).
Regards
Philippe
De : David Lxxx [mailto:[EMAIL PROTECTED]
Envoyé : mardi 1 juillet 2008 13:36
À : 'Philippe Cxxx'
Objet : TR: Maintenant, je Suis Encore en Bonne Sante.
Un exemple de spam reçu en début d'après-midi :
Return-Path: < <mailto:[EMAIL PROTECTED]>
[EMAIL PROTECTED]>
Delivered-To: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
Received: by mail.societe.fr (Postfix, from userid 513)
id 1A788E874; Tue, 1 Jul 2008 13:14:41 +0200 (CEST)
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on mail.societe.fr
X-Spam-Level: ****
X-Spam-Status: No, score=4.7 required=6.2 tests=BAYES_50,HTML_MESSAGE,
MR_NOT_ATTRIBUTED_IP,NO_RDNS,RCVD_IN_DYNABLOCK,RCVD_IN_SORBS,
RCVD_IN_SORBS_DUL autolearn=no version=3.1.8
Received: from bianchet-9c435d (unknown [79.0.238.53])
by mail.societe.fr (Postfix) with ESMTP
id 062BCE79D; Tue, 1 Jul 2008 13:14:36 +0200 (CEST)
Received: from [79.0.238.53] by smtpb.co.fresno.ca.us; Tue, 1 Jul 2008
12:22:08 +0100
From: La Sante Est Bonne < <mailto:[EMAIL PROTECTED]>
[EMAIL PROTECTED]>
To: < <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]>
Subject: Maintenant, je Suis Encore en Bonne Sante.
Date: Tue, 1 Jul 2008 12:22:08 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0006_01C8DB75.1466D800"
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
Thread-Index: Aca6QNJ4HDQU6IIFUKME9X0D8P0D1F==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2663
Message-ID: < <mailto:[EMAIL PROTECTED]>
[EMAIL PROTECTED]>
Status:
De : La Sante Est Bonne [mailto:[EMAIL PROTECTED]
Envoyé : mardi 1 juillet 2008 13:22
À : [EMAIL PROTECTED]
Objet : Maintenant, je Suis Encore en Bonne Sante.
Meilleure medecine et les meilleures Pillules seulement pour vous.
Rendez-vous de EuroPharmacie de l'Internet et son enthousiasme sont
correctement. Ainsi, beaucoup de choix et peu couteuse ... il ya seulement
ici.
Ces Pilules sont vraiment les meilleurs. Le meilleur de fabrication et de
production. Prix que vous aimez.
