ALT Linux Community general discussions
 help / color / mirror / Atom feed
From: Anatoliy Lisjutin <SilverFox@rgantd.ru>
To: community@altlinux.ru
Subject: [Comm] (no subject)
Date: Mon, 31 Jan 2005 17:35:22 +0300
Message-ID: <200501311735.23000.SilverFox@rgantd.ru> (raw)

Здравствуйте!

Перекинул я фильтрацию спама после spamassassin с drweb на procmail.. 
Но вот проходит спам мимо procmail-а через pipe..
В main.cf стоит mailbox_command = /usr/bin/procmail -a $DOMAIN -d $LOGNAME да 
и остальное  вобщем все по умолчанию из Mастера.. Почта только к локальным 
пользователм. Но вот такие сообщения пролазят..  Как избавится.. Вернуть 
доктору фильтрацию? Не хочется.. Только разделил вирусы и спам.. Но как 
перыть кислород спаму через pipe ?
-------------------------------------------------
Return-Path: <spam@spamtest.ru>
 X-Original-To: info@RGANTD.ru
 Delivered-To: root@rusarchives.ru
 Received: by rgantd.ru (Postfix, from userid 550)
        id 9ABC81833FC; Mon, 31 Jan 2005 03:01:44 +0300 (MSK)
 Received: from localhost by main.rgantd.ru
        with SpamAssassin (version 3.0.0-pre3);
        Mon, 31 Jan 2005 03:01:44 +0300
 From: SuperShop <null@maillist.ru>
 To: SPAM@SPAMTEST.RU
 Subject: =?koi8-r?B?8vX+6+kg8yDp8/7l+uHg/ent6SD+5fLu6ezh7ek=?=
 Date: Sun, 30 Jan 2005 23:40:15 +0300
 Message-Id: <20050130204504.77FC51ABE37@round.agava.net>
 X-Spam-Flag: YES
 X-Spam-Checker-Version: SpamAssassin 3.0.0-pre3 (2004-07-22) on 
main.rgantd.ru
 X-Spam-Level: ******************
 X-Spam-Status: Yes, score=18.5 required=6.0 tests=BAYES_99,BIZ_TLD,
        EXTRA_MPART_TYPE,FORGED_RCVD_HELO,HTML_90_100,HTML_FONT_BIG,
        HTML_FONT_FACE_CAPS,HTML_IMAGE_ONLY_12,HTML_MESSAGE,MPART_ALT_DIFF,
        RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_SBL,
        URIBL_WS_SURBL autolearn=no version=3.0.0-pre3
 MIME-Version: 1.0
 Content-Type: multipart/mixed;
  boundary="----------=_41FD7568.5A037CE9"
 Status: RO
 X-Status: U
 X-KMail-EncryptionState: 
 X-KMail-SignatureState: 
 X-KMail-MDN-Sent: 
 
Content analysis details: 18.5 points, 6.0 required
 0.0 EXTRA_MPART_TYPE       Header has extraneous Content-type:...type= entry
 0.0 FORGED_RCVD_HELO       Received: contains a forged HELO
 1.2 BIZ_TLD                URI: Contains a URL in the BIZ top-level domain
 0.0 HTML_90_100            BODY: Message is 90% to 100% HTML
 1.1 HTML_FONT_FACE_CAPS    BODY: HTML font face has excess capital characters
 2.3 HTML_IMAGE_ONLY_12     BODY: HTML: images with 800-1200 bytes of words
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.3 HTML_FONT_BIG          BODY: HTML tag for a big font size
 1.5 MPART_ALT_DIFF         BODY: HTML and text parts are different
 1.9 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
 0.1 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [4.26.52.12 listed in dnsbl.sorbs.net]
 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                  [Blocked - see <http://www.spamcop.net/bl.shtml?4.26.52.12>]
 4.9 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [4.26.52.12 listed in sbl-xbl.spamhaus.org]
 1.7 URIBL_SBL              Contains a URL listed in the SBL blocklist
                            [URIs: bulka.biz]
 1.8 URIBL_WS_SURBL         Contains a URL listed in the WS SURBL blocklist
                            [URIs: bulka.biz]

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


Встроенное сообщение


Return-Path: <spam@spamtest.ru>
 Received: from YOUR-VDQZJB2FWX (unknown [4.26.52.12])
        by rgantd.ru (Postfix) with SMTP
        id 421741833F7; Mon, 31 Jan 2005 03:01:15 +0300 (MSK)
 Received: from [195.161.118.27] (port=25 helo=round.agava.net)
 by mx10.mail.ru with esmtp 
 id 1CvLwO-000LAX-00
 for SPAM@SPAMTEST.RU; Sun, 30 Jan 2005 23:45:04 +0300
 Received-SPF: pass (mx10.mail.ru: domain of maillist.ru designates 
195.161.118.27 as permitted sender) client-ip=195.161.118.27; 
envelope-from=95522-errors@maillist.ru; helo=round.agava.net;
 Received: from localhost.localdomain (shadow2.agava.net [195.161.118.24])
 by round.agava.net (Postfix) with ESMTP id 77FC51ABE37
 for <SPAM@SPAMTEST.RU>; Sun, 30 Jan 2005 23:45:04 +0300 (MSK)
 Content-Type: multipart/related;
 type="multipart/alternative";
 boundary="----=_NextPart_000_0C83_01C50725.DCAD0C80"
 Content-Transfer-Encoding: binary
 MIME-Version: 1.0
 X-Mailer: MIME-tools 5.411 (Entity 5.404)
 Subject: =?koi8-r?B?8vX+6+kg8yDp8/7l+uHg/ent6SD+5fLu6ezh7ek=?=
 Date: Sun, 30 Jan 2005 23:40:15 +0300
 X-MailList-Message-ID: 226216
 Sender: 95522-errors@maillist.ru
 List-Help: <http://www.maillist.ru>
 List-Subscribe: <http://www.maillist.ru/mpb/ml_fs.cgi?Action=fs&topic=95522>
 Errors-To: 95522-errors@maillist.ru
 List-Unsubscribe: 
<http://www.maillist.ru/mpb/unsub.cgi?95522&2127684&177G1qPjV7CB77s3zx-81Q>
 List-Id: =?KOI8-R?B?TWFpbExpc3QucnUgPDk1NTIyLm1haWxsaXN0LnJ1?=
 =?KOI8-R?B?Pg==?=
 List-Post: NO
 List-Owner: <mailto:mailbox@eduabroad.ru>
 X-MailList-PID: 2127684
 From: SuperShop <null@maillist.ru>
 To: SPAM@SPAMTEST.RU
 Message-Id: <20050130204504.77FC51ABE37@round.agava.net>
________________________________________________________________

На мой взгляд с квадратной за день головы - это дырка в pостфиcs или это drweb 
не туда отправляет после себя?  Может это он разложил сообщение на кучку 
сообщений , которые оно содержало ит пихнул их не туда , куда бы я хотел?? 
О.. эта мысль только родилась , я ее буду думать :)
-- 
With my best regards to you !!
http://rusarchives.ru http://rgantd.ru http://victory.rusarchives.ru
SilverFox@rgantd.ru


             reply	other threads:[~2005-01-31 14:35 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-01-31 14:35 Anatoliy Lisjutin [this message]
2005-02-01  4:27 ` Mike Lykov
2005-02-01 16:18   ` [Comm] Нужен сканер за 80$ Vinogradov Anton
2005-02-01 20:11     ` Мар'ян Петришин
2005-02-01 20:12     ` Мар'ян Петришин
2005-02-02 16:23       ` Re[2]: " demiurg888
2005-02-04 22:24         ` Arioch
2005-02-05 10:44           ` Вячеслав Диконов

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200501311735.23000.SilverFox@rgantd.ru \
    --to=silverfox@rgantd.ru \
    --cc=community@altlinux.ru \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

ALT Linux Community general discussions

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
		mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
	public-inbox-index community

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.community


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git