Le 14/06/2011 11:34, Harry Lachanas ( via Freemail ) a écrit : > Hi list, > Just by looking at the headers "Return-Path", "From:" and "To:" > one can sense that the following is spam ... > > --------------------------------------------------------------------------------------------------- > > > Return-Path:<[email protected]> > > X-Original-To: [email protected] > > Delivered-To: [email protected] > > Received: from localhost (unknown [127.0.0.1]) > > by mail.example.gr (Postfix) with ESMTP id D17E557547EC > > for<[email protected]>; Tue, 14 Jun 2011 00:39:48 +0300 (EEST) > > X-Virus-Scanned: Debian amavisd-new at mail.example.gr > > Received: from mail.example.gr ([127.0.0.1]) > > by localhost (mail.example.gr [127.0.0.1]) (amavisd-new, port > 10024) > > with LMTP id yHroNA2goYHC for<[email protected]>; > > Tue, 14 Jun 2011 00:39:40 +0300 (EEST) > > Received: from [186.194.3.66] (unknown [186.194.3.66]) > > by mail.example.gr (Postfix) with ESMTP id 7567357547E2 > > for<[email protected]>; Tue, 14 Jun 2011 00:39:39 +0300 (EEST) > > Received: from [95.53.111.119] (helo=uvthdjg.mnghdffxosiys.net) > > by with esmtpa (Exim 4.69) > > (envelope-from ) > > id 1MMI1H-7816uo-2U > > for [email protected]; Mon, 13 Jun 2011 18:39:39 -0300 > > From:<[email protected]> > > To:<[email protected]> > > Subject: Re: CV 54 > > --------------------------------------------------------------------------------------------------- > > a) helo host uvthdjg.mnghdffxosiys.net does not have an ip > b) rdns for 95.53.111.119 gives > pppoe.95-53-111-119.dynamic.lenobl.avangarddsl.ru
if you want a hash: .dynamic.lenobl.avangarddsl.ru REJECT generic hostname if you want a pcre: /pppoe.[\w\d]+\.dynamic\./ REJECT generic hostname > c) Envelope sender ie "return path" is different that From: header > d) from: and to: headers are pretending to be postmaster @ my domain. > > > Is there an rfc compliant way to reject this ??? you can reject spam without asking the IETF.
