我有一个新的WINWEBMAIL垃圾邮件网关的思路

chinaliuqi

dig 153.68.195.209.cblplus.anti-spam.org.cn | find "IN A 127"

这个过程会快些

tdk

我就用kerio 自带的rbl查询 感觉挺好
呵呵  如果觉得慢 也可以做一个本地的rbl
总之这东西 都是垃圾惹得祸

个人能力肯定有限，有时候还是需要一些付费或者公众的产品来解决

chinaliuqi

如果在本地来过滤垃圾邮件，我觉得自己开发，到不如用SpamAssassin

chinaliuqi

基于 SpamAssassin FOR Winwebmail 小工具 我已经写好了！不过由于本地用户较多，邮件较多！所以效率不高 10分钟一次 呵呵。

功能还可以 支持RBL Bayesian helo Penalty

主要是遍历目录的时候太慢


又经过了优化，现在遍历一次大概也需要一点时间，系统资源占用也降的很低了！效率有明显提高！25万文件 1523个文件夹 遍历一次不是太容易。



[ 本帖最后由 chinaliuqi 于 2008-2-5 23:04 编辑 ]

chinaliuqi

邮件头信息

Received: from localhost by mail-dns-server
    with SpamAssassin (version 3.0.1);
    Tue, 05 Feb 2008 07:18:52 +0800
From: =?GB2312?B?wfXdvA==?= <liujing@sina.com>
To: webmaster@supresoft.com
Subject: [SPAM] =?GB2312?B?usO+w7K7vPvE48HLLLu5vMe1w87SwvA/?=
Date: Tue, 5 Feb 2008 06:40:14 +0800
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on mail-dns-server
X-Spam-Status: Yes, score=11.9 required=5.0 tests=CN_BODY_7,CN_SUBJECT_245,
    FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_60_70,
    HTML_IMAGE_ONLY_08,HTML_MESSAGE,HTML_TEXT_AFTER_BODY,
    HTML_TEXT_AFTER_HTML,MIME_8BIT_HEADER,MIME_HTML_ONLY,
    RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL autolearn=no version=3.0.1
X-Spam-Level: ***********
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_47A79D5C.28FA0000"



经过过滤后的邮件内容  


Spam detection software, running on the system "mail-dns-server", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
http://spam.newhi.net for details.

Content preview:  我是你的好朋友，找资料时发现的一个很好的网站
  上面的学习资料很多 还有很多教学视频 [...]

Content analysis details:   (11.9 points, 5.0 required)

pts rule name              description
---- ---------------------- --------------------------------------------------
0.5 CN_SUBJECT_245         Subject contains "好久"
0.2 CN_BODY_7              BODY: Body contains "网站"
0.0 HTML_60_70             BODY: Message is 60% to 70% HTML
0.2 HTML_TEXT_AFTER_BODY   BODY: HTML contains text after BODY close tag
1.2 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE           BODY: HTML included in message
0.2 HTML_TEXT_AFTER_HTML   BODY: HTML contains text after HTML close tag
2.0 HTML_IMAGE_ONLY_08     BODY: HTML: images with 400-800 bytes of words
1.8 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <http://www.spamcop.net/bl.shtml?221.203.168.147>]
2.5 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [221.203.168.147 listed in sbl-xbl.spamhaus.org]
0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
0.0 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
0.3 MIME_8BIT_HEADER       Message header contains 8-bit character
3.0 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

[ 本帖最后由 chinaliuqi 于 2008-2-5 07:26 编辑 ]