I have a lot of Spam getting into our mail servers where the common thread is cloudapp
/root/weeklymail/Thumaillog:Aug 27 11:58:15 plesk3 qmail-scanner-queue.pl: qmail-scanner[12013]: Clear:RC:0(216.170.115.184):SA:0(0.9/4.0): 4.409458 6225 comp...@franking-expert.co.uk u...@domain.com Saving_by_Switching <3442703078ef969a9f97133682d9e...@expert.cloudapp.net> 1409137091.12021-1.plesk3.hostname.co.uk:3019 1409137091.12021-0.plesk3.emailitis.co.uk:1263 orig-plesk3.hostname.co.uk140913709079712013:6225 And the hyperlinks in the emails are http://expert.cloudapp.net/..... Please could you advise on how I can block by the information on the maillog on that, or using a rule which checks the URL to include the above thread? Many thanks in advance for any help, Christoph
