Hello,

 

in the past days my server receives alot of spam from known and valid mailhosts 
(aim, hotmail, etc) and I am looking for a solution to greylist/blacklist those 
attempts.

 

If I look into the mailheaders the receiving mail-address is not even listed 
(guess th BCC field is used).

 

I attach two mail headers which are spam. Is there a solution for such emails?

 

#### Mailheader one ####

 

X-Spam-Checker-Version: SpamAssassin 3.1.7-deb3 (2006-10-05) on 

                h1406933.stratoserver.net

X-Spam-Level: 

X-Spam-Status: No, score=0.6 required=7.0 tests=HTML_MESSAGE,NO_REAL_NAME,

                UNPARSEABLE_RELAY autolearn=no version=3.1.7-deb3

Received: (qmail 2509 invoked from network); 3 Jun 2009 20:31:34 +0200

Received-SPF: pass (stefanpausch.com: domain of aim.com designates 
64.12.143.145 as permitted sender) client-ip=64.12.143.145; 
envelope-from=scazonak...@aim.com; helo=omr-m33.mx.aol.com;

Received: from omr-m33.mx.aol.com (64.12.143.145)

  by stefanpausch.com with SMTP; 3 Jun 2009 20:31:34 +0200

Received: from imo-da04.mx.aol.com (imo-da04.mx.aol.com [205.188.169.202])

                by omr-m33.mx.aol.com (8.14.1/8.14.1) with ESMTP id 
n53ICXql028666;

                Wed, 3 Jun 2009 14:12:33 -0400

Received: from scazonak...@aim.com

                by imo-da04.mx.aol.com  (mail_out_v40_r1.5.) id i.c99.4b08cd82 
(37533)

                 for <garyjc...@hotmail.com>; Wed, 3 Jun 2009 14:12:23 -0400 
(EDT)

Received: from smtprly-db02.mx.aol.com (smtprly-db02.mx.aol.com 
[205.188.249.153]) by cia-mb01.mx.aol.com (v123.4) with ESMTP id 
MAILCIAMB016-5c374a26bcf227; Wed, 03 Jun 2009 14:12:19 -0400

Received: from WEBMAIL-DZ24 (webmail-dz24.sim.aol.com [205.188.185.38]) by 
smtprly-db02.mx.aol.com (v123.4) with ESMTP id MAILSMTPRLYDB025-5c374a26bcf227; 
Wed, 03 Jun 2009 14:12:02 -0400

To: garyjc...@hotmail.com

Subject: Just want to inform you.

Date: Wed, 03 Jun 2009 14:12:02 -0400

X-AOL-IP: 79.33.107.112

X-MB-Message-Source: WebUI

MIME-Version: 1.0

From: scazonak...@aim.com

X-MB-Message-Type: User

Content-Type: multipart/alternative; 

 boundary="--------MB_8CBB28DED8ADDFF_177C_DCE_WEBMAIL-DZ24.sysops.aol.com"

X-Mailer: AIM WebMail 42952-STANDARD

Received: from 79.33.107.112 by WEBMAIL-DZ24.sysops.aol.com (205.188.185.38) 
with HTTP (WebMailUI); Wed, 03 Jun 2009 14:12:02 -0400

Message-Id: <8cbb28ded861953-177c-...@webmail-dz24.sysops.aol.com>

 

 

----------MB_8CBB28DED8ADDFF_177C_DCE_WEBMAIL-DZ24.sysops.aol.com

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset="us-ascii"

 

#### Mailheader two ####

 

X-Spam-Checker-Version: SpamAssassin 3.1.7-deb3 (2006-10-05) on 

                h1406933.stratoserver.net

X-Spam-Level: 

X-Spam-Status: No, score=0.6 required=7.0 tests=HTML_MESSAGE,NO_REAL_NAME,

                UNPARSEABLE_RELAY autolearn=no version=3.1.7-deb3

Received: (qmail 7560 invoked from network); 4 Jun 2009 16:35:19 +0200

Received-SPF: pass (stefanpausch.com: domain of aim.com designates 
205.188.249.131 as permitted sender) client-ip=205.188.249.131; 
envelope-from=jabne...@aim.com; helo=omr-d33.mx.aol.com;

Received: from omr-d33.mx.aol.com (205.188.249.131)

  by stefanpausch.com with SMTP; 4 Jun 2009 16:35:19 +0200

Received: from imo-da02.mx.aol.com (imo-da02.mx.aol.com [205.188.169.200])

                by omr-d33.mx.aol.com (8.14.1/8.14.1) with ESMTP id 
n54EM8Zn024338;

                Thu, 4 Jun 2009 10:22:08 -0400

Received: from jabne...@aim.com

                by imo-da02.mx.aol.com  (mail_out_v40_r1.5.) id i.c31.590f1c25 
(37552)

                 for <bit...@kbbsnet.com>; Thu, 4 Jun 2009 10:21:57 -0400 (EDT)

Received: from smtprly-db02.mx.aol.com (smtprly-db02.mx.aol.com 
[205.188.249.153]) by cia-mb03.mx.aol.com (v123.4) with ESMTP id 
MAILCIAMB031-5c374a27d872b8; Thu, 04 Jun 2009 10:21:54 -0400

Received: from webmail-dh32 (webmail-dh32.sim.aol.com [205.188.170.134]) by 
smtprly-db02.mx.aol.com (v123.4) with ESMTP id MAILSMTPRLYDB025-5c374a27d872b8; 
Thu, 04 Jun 2009 10:21:38 -0400

To: bit...@kbbsnet.com

Subject: Hot news for you.

Date: Thu, 04 Jun 2009 10:21:38 -0400

X-AOL-IP: 83.230.175.12

X-MB-Message-Source: WebUI

MIME-Version: 1.0

From: jabne...@aim.com

X-MB-Message-Type: User

Content-Type: multipart/alternative; 

 boundary="--------MB_8CBB336E8484651_9F8_5313_webmail-dh32.sysops.aol.com"

X-Mailer: AIM WebMail 42952-STANDARD

Received: from 83.230.175.12 by webmail-dh32.sysops.aol.com (205.188.170.134) 
with HTTP (WebMailUI); Thu, 04 Jun 2009 10:21:38 -0400

Message-Id: <8cbb336e8411f46-9f8-2...@webmail-dh32.sysops.aol.com>

 

 

----------MB_8CBB336E8484651_9F8_5313_webmail-dh32.sysops.aol.com

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset="us-ascii"

 

 

_______________________________________________
spamdyke-users mailing list
spamdyke-users@spamdyke.org
http://www.spamdyke.org/mailman/listinfo/spamdyke-users

Reply via email to