forum.lissyara.su

Код: Выделить всё

# Exim filter Header Bcc_Recipient Filter 
if 
    foranyaddress $h_to:,$h_cc: ($thisaddress does not end "domain1.com" and 
    $thisaddress does not end "domain2.com" and 
    $thisaddress does not end "domain3.com") 
then 
    fail text "Сообщения на Bcc адрес не принимаем! Reject" 
#    save /var/spool/mail/Bcc_post # Или записываем в файл
    finish 
endif 

Код: Выделить всё

deny senders = :
message = A valid sender header is required for bounces
!verify = header_sender

Код: Выделить всё

    fail text "Сообщения на Bcc адрес не принимаем! Reject"

Код: Выделить всё

seen

Код: Выделить всё

39.20 ACL conditions
......
verify = not_blind

This condition checks that there are no blind (bcc) recipients in the message. Every envelope
recipient must appear either in a To: header line or in a Cc: header line for this condition to be
true. Local parts are checked case-sensitively; domains are checked case-insensitively. If
Resent-To: or Resent-Cc: header lines exist, they are also checked. This condition can be used
only in a DATA or non-SMTP ACL.
There are, of course, many legitimate messages that make use of blind (bcc) recipients. This
check should not be used on its own for blocking messages.

Код: Выделить всё

Return-path: <nqehwlp@bom.mactool.com>
Envelope-to: news@promoil.ru
Delivery-date: Wed, 08 Aug 2007 07:32:33 +0500
Received: from [71.194.64.15]
	by promoil.ru with esmtp (Exim 4.67 (FreeBSD))
	(envelope-from <nqehwlp@bom.mactool.com>)
	id 1IIbLW-000Btc-Qz
	for news@promoil.ru; Wed, 08 Aug 2007 07:32:33 +0500
Received: from [71.194.64.15] by mail2.qlc.co.in; Wed, 8 Aug 2007 02:19:49 +0600
Message-ID: <01c7d962$98cb4830$0f40c247@nqehwlp>
From: =?koi8-r?B?5sHJzsE=?= <nqehwlp@bom.mactool.com>
To: <news@promoil.ru>
Subject: =?koi8-r?B?4s/M2NvFIMvMycXO1M/XPw==?=
Date: Wed, 8 Aug 2007 02:19:49 +0600
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0007_01C7D938.AFF54030"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1807
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
X-ACL-Warn: "That Host has reverse sone not match with HELO"
X-Spam-Score: 8.4 (++++++++)
X-Spam-Report: Spam detection software, running on the system "mail.promoil.ru", has
	identified this incoming email as possible spam.  The original message
	has been attached to this so you can view it (if it isn't spam) or label
	similar future email.  If you have any questions, see
	the administrator of that system for details.
	Content preview:  Sp@m Factory тБУУЩМЛЙ РП ЬМЕЛФТПООПК РПЮФЕ: ВЩУФТП; ОЕДПТПЗП;
	ЗЙВЛБС УЙУФЕНБ УЛЙДПЛ; ЛБЮЕУФЧЕООП. [...] 
	Content analysis details:   (8.4 points, 5.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	0.8 DATE_IN_PAST_06_12     Date: is 6 to 12 hours before Received: date
	0.1 HTML_90_100            BODY: Message is 90% to 100% HTML
	0.0 HTML_MESSAGE           BODY: HTML included in message
	3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
	[score: 1.0000]
	2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
	[71.194.64.15 listed in dnsbl.sorbs.net]
	1.9 RCVD_IN_NJABL_DUL      RBL: NJABL: dialup sender did non-local SMTP
	[71.194.64.15 listed in combined.njabl.org]
Subject: ***SPAM*** вПМШЫЕ ЛМЙЕОФПЧ?

Код: Выделить всё

Aug  8 07:32:06 mail exim[45732]: Delay 20s for  [71.194.64.15] with HELO=[71.194.64.15]. Mail from nqehwlp@bom.mactool.com to
 news@promoil.ru.
Aug  8 07:32:32 mail spamd[720]: spamd: connection from localhost.promoil.ru [127.0.0.1] at port 61685
Aug  8 07:32:32 mail spamd[720]: spamd: checking message <01c7d962$98cb4830$0f40c247@nqehwlp> for spamd:26
Aug  8 07:32:33 mail spamd[720]: spamd: identified spam (8.4/5.0) for spamd:26 in 0.4 seconds, 3385 bytes.
Aug  8 07:32:33 mail spamd[720]: spamd: result: Y 8 - BAYES_99,DATE_IN_PAST_06_12,HTML_90_100,HTML_MESSAGE,RCVD_IN_NJABL_DUL,R
CVD_IN_SORBS_DUL scantime=0.4,size=3385,user=spamd,uid=26,required_score=5.0,rhost=localhost.promoil.ru,raddr=127.0.0.1,rport=
61685,mid=<01c7d962$98cb4830$0f40c247@nqehwlp>,bayes=1,autolearn=no
Aug  8 07:32:33 mail exim[45732]: 1IIbLW-000Btc-Qz <= nqehwlp@bom.mactool.com H=([71.194.64.15]) [71.194.64.15] I=[85.112.36.3
8]:25 P=esmtp S=4512 id=01c7d962$98cb4830$0f40c247@nqehwlp from <nqehwlp@bom.mactool.com> for news@promoil.ru