最近这样的垃圾邮件如何处理

job21 · 发表于 2006-12-18 20:22:28

最近所有用户都收到如下邮件,邮件来源如下信息:
X-Priority:3
X-MSMail-Priority:Normal
X-Mailer:Microsoft Outlook Express 6.00.2800.1807
X-MimeOLE

roduced By Microsoft MimeOLE V6.00.2800.1807
X-Lookup-Warning:MAIL lookup on vcupzk@sawant.name does not match 71.30.67.16
X-MDRcpt-To:lx@tmarma.com
X-Rcpt-To:lx@tmarma.com
X-MDRemoteIP:71.30.67.16
X-Return-Path:vcupzk@sawant.name
X-MDaemon-Deliver-To:lx@tmarma.com
X-Spam-Checker-Version:SpamAssassin 3.0.4 (2005-06-05)
X-Spam-Report:*  0.0 HTML_30_40 BODY: Message is 30% to 40% HTML
*  1.6 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
*    [score: 0.5016]
*  0.0 HTML_MESSAGE BODY: HTML included in message
X-Spam-Status:No, score=1.7 required=10.0 tests=BAYES_50,HTML_30_40,
HTML_MESSAGE autolearn=no version=3.0.4
X-Spam-Level:*
X-Spam-Processed:tmarma.com, Wed, 06 Dec 2006 07:27:38 +0800
X-MDAV-Processed:tmarma.com, Wed, 06 Dec 2006 07:27:40 +0800
前面是图片,
后面是文字基本上是以下之类.
The convention will kick off with a two-part business management seminar by .
Then, share it with your team. Then, share it with your team. Maybe other projects are ready for this.
If you plan to invest in replanning and rescheduling, that doesn't matter.
Let's make sure we all go home to our families every night. City officials suggest that the economics of the jewelry business wouldn't support the higher rents of new construction without a tax break for the developer.
Sure project teams would benefit tremendously from more story-telling about the project.
Neither will solo-planning. If you plan to invest in replanning and rescheduling, that doesn't matter.
How many of us think we have the authority we need to do our jobs? Some experts, like author and higher-education-consultant Lara Couturier, worry that it . Neither will solo-planning......

job21 · 发表于 2006-12-18 20:25:27

太烦了,每个人每天收到三到四封,反垃圾邮件感觉没有起作用,各位有碰到这种邮件吗,如何处理的?

lwz_08 · 发表于 2006-12-18 22:18:52

类似的图片垃圾邮件比较难搞定

只有一封一封扔到SPA中去了

dennishan · 发表于 2006-12-18 22:45:25

唯一解法：commtouch

job21 · 发表于 2006-12-19 08:36:52

楼上,如何使用commtouch

job21 · 发表于 2006-12-19 08:38:09

在反垃圾邮件论坛看到这样一段,不知道在MD中如何使用

用Regular Expression(Perl-compatible)的关键词过滤html内容.
.*src="cid:((part1|[A-Z0-9]{8})\.[A-Z0-9]{8}\.[A-Z0-9]{8}|[A-Z0-9]{20}).*
可过滤掉一部分.

好象都有这样的特征：
<img src="cid:5GMSG3DV0N" border=0></a>
<img src="cid:GVD5N0RVT5" border=0></a>

可以考虑对这些cid特征进行加分操作，以提高识别率。

我是用

*</HEAD>[ ]{0,3}<BODY bgColor=#ffffff>[ ]{0,3}<DIV><FONT face=Arial size=2>[ ]{0,3}<IMG alt="[a-z]{2,12}"[ ]{0,3}hspace=0[ ]{0,3}src="cid:[0-9a-f]{12}\$[0-9a-f]{8}\$[0-9a-f]{8}@[a-z]{2,8}".*

job21 · 发表于 2006-12-20 10:36:56

没人理了

U-Mail · 发表于 2006-12-20 14:16:04

过滤被DNS-RBL认为的IP黑名单过拉的邮件即可。

钉子 · 发表于 2006-12-21 00:33:29

job21 你说到的过滤规则现在效果如何？

U-Mail · 发表于 2006-12-22 02:21:10

原帖由 job21 于 2006-12-19 08:38 发表
在反垃圾邮件论坛看到这样一段,不知道在MD中如何使用

用Regular Expression(Perl-compatible)的关键词过滤html内容.
.*src="cid(part1|{8})\.{8}\.{8}|{20}).*
可过滤掉一部分.

好象都有这样的 ...

在MD的80_MDaemon_updates.cf里面加。

		自动登录	找回密码
密码			会员注册

最近这样的垃圾邮件如何处理

本帖子中包含更多资源