主页 / 问题 / 687000
Accepted
Сергей Гамов
Asked:2020-07-04 16:20:59 +0000 UTC2020-07-04 16:20:59 +0000 UTC

<info@> 标头中的 SPAM 后缀

  • 772

下午好！我在与垃圾邮件发送者的不平等斗争中需要帮助）这是我的后缀配置（与问题有关的部分）：

smtpd_restriction_classes = verify_sender,
                            rbl_cbl_abuseat_org,
                            rbl_sbl_spamhaus_org,
                            rbl_dul_ru, rbl_spamcop,
                            white_client_ip,
                            black_client_ip,
                            block_dsl,
                            helo_access,
                            white_client,
                            black_client,
                            mx_access

verify_sender        = reject_unverified_sender, permit 
rbl_cbl_abuseat_org  = reject_rbl_client cbl.abuseat.org
rbl_dul_ru           = reject_rbl_client dul.ru
rbl_sbl_spamhaus_org = reject_rbl_client sbl.spamhaus.org
rbl_spamcop          = reject_rbl_client bl.spamcop.net
white_client_ip      = check_client_access pcre:/etc/postfix/config/white_client_ip
black_client_ip      = check_client_access pcre:/etc/postfix/config/black_client_ip
white_client         = check_sender_access pcre:/etc/postfix/config/white_client
black_client         = check_sender_access pcre:/etc/postfix/config/black_client
block_dsl            = regexp:/etc/postfix/config/block_dsl
helo_access          = check_helo_access pcre:/etc/postfix/config/helo_checks
mx_access            = check_sender_mx_access cidr:/etc/postfix/config/mx_access

smtpd_client_restrictions = white_client_ip,
                            black_client_ip,
                            white_client,
                            black_client,
                            helo_access,
                            block_dsl,
                            rbl_dul_ru,
                            rbl_sbl_spamhaus_org,
                            rbl_spamcop,
                            rbl_cbl_abuseat_org,
                            permit_mynetworks,
                            permit_sasl_authenticated,
                            reject_unauth_destination,
                            reject_unauth_pipelining,
                            reject_unknown_address,
                            reject_unknown_recipient_domain,
                            reject_unknown_sender_domain
smtpd_sender_restrictions = white_client,
                            white_client_ip,
                            black_client_ip,
                            reject_unknown_recipient_domain,
                            reject_unknown_sender_domain,
                            reject_non_fqdn_recipient,
                            reject_non_fqdn_sender,
                            permit_sasl_authenticated,
                            permit_mynetworks,
                            mx_access,
                            reject_unlisted_sender,
                            reject_unauth_destination
smtpd_recipient_restrictions = verify_sender,
                               white_client,
                               helo_access,
                               reject_non_fqdn_sender,
                               reject_non_fqdn_recipient,
                               reject_unknown_sender_domain,
                               reject_unknown_recipient_domain,
                               reject_unauth_pipelining,
                               permit_sasl_authenticated,
                               permit_mynetworks,
                               reject_unlisted_recipient,
                               reject_unknown_address,
                               reject_unauth_destination,
                               reject_multi_recipient_bounce, 
                               check_policy_service inet:localhost:10023

smtpd_data_restrictions = reject_unauth_pipelining,
                          reject_multi_recipient_bounce,
                          permit
smtp_skip_5xx_greeting = no
smtpd_reject_unlisted_sender = yes
smtpd_reject_unlisted_recipient = yes

MX 已正确注册，有 DKIM、SPF 记录（无 DMARC），已启用灰名单。因此，垃圾邮件周期性地落在 info@ 和 contact@ 邮箱上；其显着特点是发件人和收件人都与邮件域无关，但标题与邮件域相关：

Received: from mail.spammers.net (mail.spammers.net [ip-address])
        by my-post.domain.com (Postfix) with ESMTP id 5B56A00000
        for <info@domain.com>; Sun,  2 Jul 2017 20:42:10 +0000 (CEST)
Message-ID: <it581458.43231@mail.spammers.net>
Reply-To: "Original SPAM" <it@spammers.net>
From: "Original SPAM" <it@spammers.net>
To: <g.meriseeg@postmotmydomain.gg>
Subject: Subj spammers
Date: Sun, 02 Jul 2017 20:14:39 +0000

如何过滤此类邮件？有 spamassasin，但即使在用 10 封类似的电子邮件训练他之后，他也会跳过这些电子邮件。

postfix

1 个回答

  1. Best Answer

    info@domain.com如果您的地址在信函的密件抄送（密件）中注明，则法律信函中的这些标题可能会出现。鉴于人们很少使用 BCC，您可以将以下规则添加到 spamassasin，风险自负：

    header __MY_DOAIN_CC   cc =~ /mydomain\.com/
header __MY_DOMAIN_TO  to =~ /mydomain\.com/
meta   FOREIGN_TO    (! __MY_DOAIN_CC && ! __MY_DOMAIN_TO)
score  FOREIGN_TO 0.5

    to在其中，我们检查标题和cc信件中是否提及我们的邮件域。如果我们的域不在收件人或副本中，我们会将 0.5 添加到该信件的垃圾邮件评级中。我不敢给超过 0.5，都一样，这样的标题的普通字母在理论上是可能的。

    注意：更改任何配置后，请始终检查其正确性spamassassin --lint

    不幸的是，这封信中的其余标题都是根据所有标准形成的，即使是来自与 From 相同域的 Message-ID，也没有什么需要注意的了。

    • 2

相关问题