# Django : 2012-02-06 # Kapitel 13.5 Filtern von eMails nach Inhalt # Kapitel 12.3 Überprüfen von Headern # In der Postfix-Konfigurationsdatei /etc/postfix/main.cf muss # body_checks = pcre:/etc/postfix/body_check_maps gesetzt sein! # # Nach dem Ändern der Datei ist ein "systemctl reload postfix.service" durchzuführen! # # Die Nummern hinter dem REJECT tauchen später als SMTP-Error und auch im Mailserver-Log auf. # Die auslösende Filter-Regel, die den Block ausgelöst hat, ist somit leicht wieder zu finden. # # Ausnahmeregelung für den sicheren IT-/Mailbetrieb im heimischen Netzwerk # # Domeus hat bis heute nicht den Unterschied zwischen Mailheader-To und # SMTP-Envelope-To verstanden und fabriziert seit nunmehr über sieben Jahren in # schöner Regelmäßigkeit Mailschleifen im vier/fünfstelligen Bereich. # /^Received:.*domeus\.com/ REJECT Domeus baut Mailschleifen und hat wichtige RFCs nicht verstanden # # Dauerhaft genutzte Regelungen: # =============================================== # [Immer mit aufsteiger Nummer sauber eintragen!] # If /^Subject:/i /^Subject:.*Sicherheitsaktualisierung/ REJECT Header-Subject-Spamschutzregel Subj-1071 /^Subject:.*PARTNERSHIP.*/ REJECT Header-Subject-Spamschutzregel Subj-1070 /^Subject:.*TEMPORARY JOB OFFER.*/ REJECT Header-Subject-Spamschutzregel Subj-1069 /^Subject:.*URGENT ATTENTION.*/ REJECT Header-Subject-Spamschutzregel Subj-1068 /^Subject:.*Penis.*/ REJECT Header-Subject-Spamschutzregel Subj-1067 /^Subject:.*Potenzschwache.*/ REJECT Header-Subject-Spamschutzregel Subj-1066 /^Subject:.*saxaelle.*/ REJECT Header-Subject-Spamschutzregel Subj-1065 /^Subject:.*formula for men.*/ REJECT Header-Subject-Spamschutzregel Subj-1064 /^Subject:.*wife happiness.*/ REJECT Header-Subject-Spamschutzregel Subj-1063 /^Subject:.*rentiert sich.*/ REJECT Header-Subject-Spamschutzregel Subj-1062 /^Subject:.*caught on camera./ REJECT Header-Subject-Spamschutzregel Subj-1061 /^Subject:.*Betriebsstaette sucht Beschaeftigte.*/ REJECT Header-Subject-Spamschutzregel Subj-1060 /^Subject:.*Stimulate her.*/ REJECT Header-Subject-Spamschutzregel Subj-1059 /^Subject:.*WITH DUE RESPECT.*/ REJECT Header-Subject-Spamschutzregel Subj-1058 /^Subject:.*Bigger snake.*/ REJECT Header-Subject-Spamschutzregel Subj-1057 /^Subject:.*Bang her.*/ REJECT Header-Subject-Spamschutzregel Subj-1056 /^Subject:.*young and enhanced.*/ REJECT Header-Subject-Spamschutzregel Subj-1055 /^Subject:.*YOUR ASSISTANCE.*/ REJECT Header-Subject-Spamschutzregel Subj-1054 /^Subject:.*Helping people.*/ REJECT Header-Subject-Spamschutzregel Subj-1053 /^Subject:.*Enhancing.*/ REJECT Header-Subject-Spamschutzregel Subj-1052 /^Subject:.*Blaue Pillchen.*/ REJECT Header-Subject-Spamschutzregel Subj-1051 /^Subject:.*Impotenz.*/ REJECT Header-Subject-Spamschutzregel Subj-1050 /^Subject:.*ge.fi.ckt.*/ REJECT Header-Subject-Spamschutzregel Subj-1049 /^Subject:.*Softshell.*/ REJECT Header-Subject-Spamschutzregel Subj-1048 /^Subject:.*rollige Ramona.*/ REJECT Header-Subject-Spamschutzregel Subj-1047 /^Subject:.*Dringende Gesch�ft.*/ REJECT Header-Subject-Spamschutzregel Subj-1046 /^Subject:.*Se-xy.*/ REJECT Header-Subject-Spamschutzregel Subj-1045 /^Subject:.*private party.*/ REJECT Header-Subject-Spamschutzregel Subj-1044 /^Subject:.*williges Teeny.*/ REJECT Header-Subject-Spamschutzregel Subj-1043 /^Subject:.*Special Offer.*/ REJECT Header-Subject-Spamschutzregel Subj-1042 /^Subject:.*LiveCams.*/ REJECT Header-Subject-Spamschutzregel Subj-1041 /^Subject:.*gevoegelt.*/ REJECT Header-Subject-Spamschutzregel Subj-1040 /^Subject:.*gefi.ckte.*/ REJECT Header-Subject-Spamschutzregel Subj-1039 /^Subject:.*medications.*/ REJECT Header-Subject-Spamschutzregel Subj-1038 /^Subject:.*Drecksstueck.*/ REJECT Header-Subject-Spamschutzregel Subj-1037 /^Subject:.*Miststueck.*/ REJECT Header-Subject-Spamschutzregel Subj-1036 /^Subject:.*verdorbene Hausfrau.*/ REJECT Header-Subject-Spamschutzregel Subj-1035 /^Subject:.*Ficken.*/ REJECT Header-Subject-Spamschutzregel Subj-1034 /^Subject:.*verdorbene Schlampe.*/ REJECT Header-Subject-Spamschutzregel Subj-1033 /^Subject:.*fi.ckbereit.*/ REJECT Header-Subject-Spamschutzregel Subj-1032 /^Subject:.*immer feucht.*/ REJECT Header-Subject-Spamschutzregel Subj-1031 /^Subject:.*lets chat.*/ REJECT Header-Subject-Spamschutzregel Subj-1030 /^Subject:.*bumsbare.*/ REJECT Header-Subject-Spamschutzregel Subj-1029 /^Subject:.*geiles Weib.*/ REJECT Header-Subject-Spamschutzregel Subj-1028 /^Subject:.*Dild_o.*/ REJECT Header-Subject-Spamschutzregel Subj-1027 /^Subject:.*kommen einmal pro Stunde.*/ REJECT Header-Subject-Spamschutzregel Subj-1026 /^Subject:.*secret to pleasuring.*/ REJECT Header-Subject-Spamschutzregel Subj-1025 /^Subject:.*will schlucken.*/ REJECT Header-Subject-Spamschutzregel Subj-1024 /^Subject:.*an-algeiles.*/ REJECT Header-Subject-Spamschutzregel Subj-1023 /^Subject:.*impotence.*/ REJECT Header-Subject-Spamschutzregel Subj-1022 /^Subject:.*deutscher Freund.*/ REJECT Header-Subject-Spamschutzregel Subj-1021 /^Subject:.*Po-rno.*/ REJECT Header-Subject-Spamschutzregel Subj-1020 /^Subject:.*Entspannt 60 Minuten nicht kommen.*/ REJECT Header-Subject-Spamschutzregel Subj-1019 /^Subject:.*Never be small and tiny again.*/ REJECT Header-Subject-Spamschutzregel Subj-1018 /^Subject:.*Haben Sie wieder Spass am Leben.*/ REJECT Header-Subject-Spamschutzregel Subj-1017 /^Subject:.*D ildo.*/ REJECT Header-Subject-Spamschutzregel Subj-1016 /^Subject:.*chat with you.*/ REJECT Header-Subject-Spamschutzregel Subj-1015 /^Subject:.*zu frueh kommen.*/ REJECT Header-Subject-Spamschutzregel Subj-1014 /^Subject:.*aufgeschlossene Kontakte.*/ REJECT Header-Subject-Spamschutzregel Subj-1013 /^Subject:.*Viagra.*/ REJECT Header-Subject-Spamschutzregel Subj-1012 /^Subject:.*gefic-kt.*/ REJECT Header-Subject-Spamschutzregel Subj-1011 /^Subject:.*Frau sucht aufgeschlossenen Mann.*/ REJECT Header-Subject-Spamschutzregel Subj-1010 /^Subject:.*Nach 10 Minuten kommen.*/ REJECT Header-Subject-Spamschutzregel Subj-1009 /^Subject:.*Mann lebt nur einmal.*/ REJECT Header-Subject-Spamschutzregel Subj-1008 /^Subject:.*You have received an eCard.*/ REJECT Header-Subject-Spamschutzregel Subj-1007 /^Subject:.*D.i.l.d.o.*/ REJECT Header-Subject-Spamschutzregel Subj-1006 /^Subject:.*naturgeil.*/ REJECT Header-Subject-Spamschutzregel Subj-1005 /^Subject:.*So werden sie von jeder Frau vergoettert!/ REJECT Header-Subject-Spamschutzregel Subj-1004 /^Subject:.*Advocacy.Notary Notice.*/ REJECT Header-Subject-Spamschutzregel Subj-1003 /^Subject:.*Webcam Luder.*/ REJECT Header-Subject-Spamschutzregel Subj-1002 /^Subject:.*Potenzprobleme.*/ REJECT Header-Subject-Spamschutzregel Subj-1001 /^Subject:.*RedBull fur Ihr bestes Stueck/ REJECT Header-Subject-Spamschutzregel Subj-1000 Endif # # und das Ganze nach Header-From # ============================== # #If /^From:/i #/^From: .*Online Spiele.*/ REJECT Header-From-Spamschutzregel From-106 #/^From: .*Apotheken-News.*/ REJECT Header-From-Spamschutzregel From-1005 #/^From: .*Kasino.*/ REJECT Header-From-Spamschutzregel From-1004 #/^From: .*Pharmacy.*/ REJECT Header-From-Spamschutzregel From-1003 #/^From: .*Royal Club Casino.*/ REJECT Header-From-Spamschutzregel From-1002 #/^From: .*Euro Dice Casino.*/ REJECT Header-From-Spamschutzregel From-1001 #/^From:.*happydigits.de/ REJECT Header-From-Spamschutzregel From-1000 #Endif # Django : 2014-10-10 ##If /^To:/i ##/^To: .*dj4n90@piraten-it.guru.*/ 456 I hob grod koan bock, vozupf de! ##Endif # # generelle Filerregelungen nach den üblichen Verdächtigen # ======================================================== # /^Date: .* 200[0-7]/ REJECT Your email has a date from the past. Fix your system clock and try again. /^Date: .* 19[0-9][0-9]/ REJECT Your email has a date from the past. Fix your system clock and try again. If /^X-Mailer:/i /^X-Mailer: 0001/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: Avalanche/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: Crescent Internet Tool/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: DiffondiCool/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: E-Mail Delivery Agent/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: Emailer Platinum/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: Entity/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: Extractor/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: Floodgate/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: GOTO Software Sarbacane/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: MailWorkz/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: MassE-Mail/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: MaxBulk.Mailer/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: News Breaker Pro/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: SmartMailer/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: StormPort/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. /^X-Mailer: SuperMail-2/ REJECT You used an email program that is used almost exclusively for spam. We do not accept email sent using this program. Endif