[Postfixbuch-users] Aktuelle SPAM Lage

[Helga.Mayer at uni-hohenheim.de]

----- Message from postfixbuch-users-request at listen.jpberlin.de ---------
> Date: Tue, 14 Jan 2014 16:39:03 +0100
> From: Ralf Hildebrandt <Ralf.Hildebrandt at charite.de>
> To: Carsten <postfixer99 at gmail.com>
> Cc: "Eine Diskussionsliste rund um das Postfix-Buch von Peer
> 	Heinlein." <postfixbuch-users at listen.jpberlin.de>
> Subject: Re: [Postfixbuch-users] Aktuelle SPAM Lage
> Message-ID: <20140114153903.GZ24527 at charite.de>
> Content-Type: text/plain; charset=utf-8
>
> * Carsten <postfixer99 at gmail.com>:
>> Sehr guter Ansatz.
>> Du kannst die ACL erweitern um die folgenden Ziele:
>>
>> ^http://.*/telekom/$
>> ^http://.*/NTTCable/$
>> ^http://.*/volksbank/$
>> ^http://.*/vodafon/$
>
> Mache ich!

header		HEADER_CHECKS_NR167		X-Mailer =~ /.*\b(E-Broadcaster|Emailer  
Platinum|eMarksman|Extractor|e-Merge|from stealth[^.]|Global  
Messenger|GroupMaster|Mailcast|MailKing|Match10|MassE-Mail|massmail\.pl|News  
Breaker|Powermailer|Quick Shot|Ready Aim  
Fire|WindoZ|WorldMerge|Yourdora|SEKOFOXM|Blat.v3.1.1\b/im
score		HEADER_CHECKS_NR167		6
describe	HEADER_CHECKS_NR167		Header-Spamschutzregel 167
tflags		HEADER_CHECKS_NR167		noautolearn

Alle vodafone@, telekom@ irgendeinebank@ Mails sind mit dem Blat  
command line SMTP mailer erstellt worden. Version 3.1.1
Ist ein Windows Tool. Also fuer Script Kiddies.
Meine gesammelten Vorurteile. Aber es hilft.

Viele Gruesse
Helga



-- 
This smoke signal communication (and any attachment/s) is confidential and
intended only for the individual(s) or entity named above and to others who
have been specifically authorized to receive it.
If you are not the intended recipient, please do not read, copy, use or
disclose the contents of this communication to others.
Please notify the sender that you have received this smoke signal in error, by
calling the phone number indicated or by smoke signals, and stamp out the fire
(including any attachment/s) subsequently.
Thank you.