Re: Howto filter new spam
Hello,
Tuesday, July 3, 2007, 15:34:58, Matus UHLAR - fantomas wrote:
> I'm afraid the best you can do is report them to razor/pyzor and possibly
> other networks. Also use newest possible spamassassin (and periodically run
> sa-update).
I have one solution for the ecards... This little regexp (in pcre
format) should block it without blocking any legitimate email. I have
this in header_checks in postfix.
if /^From: +"postcards\.org"/
!/<[^>]+postcards\.org>/ REJECT Forged ecards (postcards.org) spam!
endif
Because all that emails had From in the form of:
"postcards.org" <some_forged_email_from_different_domain>
So we match the first part and then ensure the same domain name is not
used in the email address. It comes from several domains, but I don't
know how to put them in the same rule, so I have new rule for every
domain. Here is list of what I've got last week:
hallmark\\.com egreetings\\.com riversongs\\.com greeting-cards\\.com all-yours\\.net E-Cards\\.com postcards\\.org
Today I'm going to try the PDFInfo plugin to SA...
--
bYE, Marki
Reply to: