On Thu, Oct 15, 2009 at 08:38, Jason Haar <jason.h...@trimble.co.nz> wrote:
> I just received what appeared to be a standard "certain north american
> country" pharma spam that went straight by rules I have that normally
> catch it. Within Thunderbird (and any other HTML-capable MUA) it's
> blatantly shouting its wares. Clever usage of SPANs appear to enable it
> to sneak straight by SA.
>
> http://pastebin.com/m56d2db96
>
> Is this something SA normally has components in place to catch/parse?
>
> --
With this:
Received: from public30108.xdsl.centertel.pl (HELO
marcin-8963fd6f) (79.163.117.156)
my postfix setup would have simply dropped it on the floor at the
HELO/EHLO. If it doens't HELO with an FQDN and a proper rDNS, we don't
talk to it.
Kurt
