Суть: приходит СПАМ (никак не поменчается) письмо мне(duev.d@tentorium.ru) но в получателе находиться не мой(emailinfo@tenniskort.ru) адрес. В заголовках BCC не вижу.
Код: Выделить всё
Received: from EX1.TENTORIUM.LAN (10.0.14.6) by EX1.TENTORIUM.LAN (10.0.14.6)
with Microsoft SMTP Server (TLS) id 15.0.1044.25 via Mailbox Transport; Fri,
27 May 2016 14:14:41 +0500
Received: from EX1.TENTORIUM.LAN (10.0.14.6) by EX1.TENTORIUM.LAN (10.0.14.6)
with Microsoft SMTP Server (TLS) id 15.0.1044.25; Fri, 27 May 2016 14:14:40
+0500
Received: from mailgw.tentorium.ru (93.170.7.7) by EX1.TENTORIUM.LAN
(195.128.133.109) with Microsoft SMTP Server (TLS) id 15.0.1044.25 via
Frontend Transport; Fri, 27 May 2016 14:14:40 +0500
Received: from s1.fatema.ru ([188.138.74.142] helo=fatema.ru)
by mailgw.tentorium.ru with esmtp (Exim 4.80)
(envelope-from <avwolxs@fatema.ru>)
id 1b6Dqp-0006bt-98
for duev.d@tentorium.ru; Fri, 27 May 2016 14:14:40 +0500
Received: from fatema.ru (unknown [95.46.114.58])
by fatema.ru (Postfix) with ESMTPA id 4CE4C4EE4AA;
Fri, 27 May 2016 04:21:47 +0300 (EEST)
Message-ID: <c3d401d1b7cf$4bc9e190$a388175f@avwolxs>
Reply-To: <alexandrowa.inna2017@yandex.ru>
From: =?windows-1251?B?0NQ=?= <avwolxs@fatema.ru>
To: <emailinfo@tenniskort.ru>
Date: Fri, 27 May 2016 04:21:52 +0300
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative";
boundary="----=_NextPart_000_0006_01D1B7CE.2CF6E8E0"
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8117.416
X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8117.416
Received-SPF: pass
X-SA-Exim-Connect-IP: 188.138.74.142
X-SA-Exim-Mail-From: avwolxs@fatema.ru
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on none
X-Spam-Level:
X-Spam-Status: No, score=0.4 required=5.0 tests=BAYES_00,
FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,HTML_MESSAGE,SPF_HELO_PASS,
SPF_PASS,T_RP_MATCHES_RCVD autolearn=no version=3.3.2
Subject: =?windows-1251?B?0e3o5uXt6OUg5+Dw7+vg8vsg5+Ag7eXx7u7y4uXy8fLi6OUg7/Du9PHy4O3k4PDy4Owg8SAxIOj+6/8gMjAxNuMuIM/u8evl5O3o5SDo5+zl7eXt6P8g0sog0NQ=?=
X-SA-Exim-Version: 4.2.1 (built Mon, 26 Dec 2011 16:24:06 +0000)
X-SA-Exim-Scanned: Yes (on mailgw.tentorium.ru)
Return-Path: avwolxs@fatema.ru
X-MS-Exchange-Organization-Network-Message-Id: 0dcf7851-f962-4da9-5756-08d3860f55b4
X-MS-Exchange-Organization-AVStamp-Enterprise: 1.0
X-MS-Exchange-Organization-AuthSource: EX1.TENTORIUM.LAN
X-MS-Exchange-Organization-AuthAs: Anonymous
X-EsetId: 37303A29F136716F637561
Пока что написал вот такой правило, буду тестировать:
Код: Выделить всё
#Спам со скрытой копией или с пересылки тоже со скрытой копией (BCC спам)
drop condition = ${if def:h_to:}
condition = ${if forall{${addresses:$h_to:}} \
{!match{$item}{@domain.com\$}}}
!senders = : *@tentorium.ru : *@tentorium.biz : *@lists.tentorium.ru : *@gmail.com : *@mail.ru : *@inbox.ru : *@bk.ru : *@list.ru : *@rambler.ru : *@yandex.ru : *@lists.tentorium.ru
message = No Bcc and forwarded messages