Hello,
in the past days my server receives alot of spam from known and valid mailhosts
(aim, hotmail, etc) and I am looking for a solution to greylist/blacklist those
attempts.
If I look into the mailheaders the receiving mail-address is not even listed
(guess th BCC field is used).
I attach two mail headers which are spam. Is there a solution for such emails?
#### Mailheader one ####
X-Spam-Checker-Version: SpamAssassin 3.1.7-deb3 (2006-10-05) on
h1406933.stratoserver.net
X-Spam-Level:
X-Spam-Status: No, score=0.6 required=7.0 tests=HTML_MESSAGE,NO_REAL_NAME,
UNPARSEABLE_RELAY autolearn=no version=3.1.7-deb3
Received: (qmail 2509 invoked from network); 3 Jun 2009 20:31:34 +0200
Received-SPF: pass (stefanpausch.com: domain of aim.com designates
64.12.143.145 as permitted sender) client-ip=64.12.143.145;
[email protected]; helo=omr-m33.mx.aol.com;
Received: from omr-m33.mx.aol.com (64.12.143.145)
by stefanpausch.com with SMTP; 3 Jun 2009 20:31:34 +0200
Received: from imo-da04.mx.aol.com (imo-da04.mx.aol.com [205.188.169.202])
by omr-m33.mx.aol.com (8.14.1/8.14.1) with ESMTP id
n53ICXql028666;
Wed, 3 Jun 2009 14:12:33 -0400
Received: from [email protected]
by imo-da04.mx.aol.com (mail_out_v40_r1.5.) id i.c99.4b08cd82
(37533)
for <[email protected]>; Wed, 3 Jun 2009 14:12:23 -0400
(EDT)
Received: from smtprly-db02.mx.aol.com (smtprly-db02.mx.aol.com
[205.188.249.153]) by cia-mb01.mx.aol.com (v123.4) with ESMTP id
MAILCIAMB016-5c374a26bcf227; Wed, 03 Jun 2009 14:12:19 -0400
Received: from WEBMAIL-DZ24 (webmail-dz24.sim.aol.com [205.188.185.38]) by
smtprly-db02.mx.aol.com (v123.4) with ESMTP id MAILSMTPRLYDB025-5c374a26bcf227;
Wed, 03 Jun 2009 14:12:02 -0400
To: [email protected]
Subject: Just want to inform you.
Date: Wed, 03 Jun 2009 14:12:02 -0400
X-AOL-IP: 79.33.107.112
X-MB-Message-Source: WebUI
MIME-Version: 1.0
From: [email protected]
X-MB-Message-Type: User
Content-Type: multipart/alternative;
boundary="--------MB_8CBB28DED8ADDFF_177C_DCE_WEBMAIL-DZ24.sysops.aol.com"
X-Mailer: AIM WebMail 42952-STANDARD
Received: from 79.33.107.112 by WEBMAIL-DZ24.sysops.aol.com (205.188.185.38)
with HTTP (WebMailUI); Wed, 03 Jun 2009 14:12:02 -0400
Message-Id: <[email protected]>
----------MB_8CBB28DED8ADDFF_177C_DCE_WEBMAIL-DZ24.sysops.aol.com
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"
#### Mailheader two ####
X-Spam-Checker-Version: SpamAssassin 3.1.7-deb3 (2006-10-05) on
h1406933.stratoserver.net
X-Spam-Level:
X-Spam-Status: No, score=0.6 required=7.0 tests=HTML_MESSAGE,NO_REAL_NAME,
UNPARSEABLE_RELAY autolearn=no version=3.1.7-deb3
Received: (qmail 7560 invoked from network); 4 Jun 2009 16:35:19 +0200
Received-SPF: pass (stefanpausch.com: domain of aim.com designates
205.188.249.131 as permitted sender) client-ip=205.188.249.131;
[email protected]; helo=omr-d33.mx.aol.com;
Received: from omr-d33.mx.aol.com (205.188.249.131)
by stefanpausch.com with SMTP; 4 Jun 2009 16:35:19 +0200
Received: from imo-da02.mx.aol.com (imo-da02.mx.aol.com [205.188.169.200])
by omr-d33.mx.aol.com (8.14.1/8.14.1) with ESMTP id
n54EM8Zn024338;
Thu, 4 Jun 2009 10:22:08 -0400
Received: from [email protected]
by imo-da02.mx.aol.com (mail_out_v40_r1.5.) id i.c31.590f1c25
(37552)
for <[email protected]>; Thu, 4 Jun 2009 10:21:57 -0400 (EDT)
Received: from smtprly-db02.mx.aol.com (smtprly-db02.mx.aol.com
[205.188.249.153]) by cia-mb03.mx.aol.com (v123.4) with ESMTP id
MAILCIAMB031-5c374a27d872b8; Thu, 04 Jun 2009 10:21:54 -0400
Received: from webmail-dh32 (webmail-dh32.sim.aol.com [205.188.170.134]) by
smtprly-db02.mx.aol.com (v123.4) with ESMTP id MAILSMTPRLYDB025-5c374a27d872b8;
Thu, 04 Jun 2009 10:21:38 -0400
To: [email protected]
Subject: Hot news for you.
Date: Thu, 04 Jun 2009 10:21:38 -0400
X-AOL-IP: 83.230.175.12
X-MB-Message-Source: WebUI
MIME-Version: 1.0
From: [email protected]
X-MB-Message-Type: User
Content-Type: multipart/alternative;
boundary="--------MB_8CBB336E8484651_9F8_5313_webmail-dh32.sysops.aol.com"
X-Mailer: AIM WebMail 42952-STANDARD
Received: from 83.230.175.12 by webmail-dh32.sysops.aol.com (205.188.170.134)
with HTTP (WebMailUI); Thu, 04 Jun 2009 10:21:38 -0400
Message-Id: <[email protected]>
----------MB_8CBB336E8484651_9F8_5313_webmail-dh32.sysops.aol.com
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"
_______________________________________________
spamdyke-users mailing list
[email protected]
http://www.spamdyke.org/mailman/listinfo/spamdyke-users
