Massenhaft Spam Emails...

[dino23]

Hallo,
ich bekomme täglich zisch hundert Spam Mails.
immer an eine andere Adresse meiner Domain, wahrlos zusammen gewürfelt.
Ich nutze Sendmail mit Spamassasin, komme aber einfach nicht zur lösung des Problems...

Hier mal eine solche Mail.
Spamassin sieht keinen Spam in Ihr, die anderen haben etwa immer den selben Inhalt, entweder Sex, Viagra oder Software zu billig Preisen.

Code: Select all

AN:
antiljoxt@bordonaro.de

HEADER:
Return-Path: <MAILER-DAEMON@pluto94.plusserver.de>
Received: from mail.bektel.com (mail.bektel.com [66.163.155.240])
by pluto94.plusserver.de (8.12.10/8.12.10/SuSE Linux 0.7) with ESMTP id i7S5PTwL020619
for <antiljoxt@bordonaro.de>; Sat, 28 Aug 2004 07:25:30 +0200
Received: from localhost (localhost)
by mail.bektel.com (MOS 3.4.5-GR)
with internal id BME42488;
Sat, 28 Aug 2004 00:23:53 -0500 (CDT)
Date: Sat, 28 Aug 2004 00:23:53 -0500 (CDT)
From: Mail Delivery Subsystem <MAILER-DAEMON@bektel.com>
Message-Id: <200408280523.BME42488@mail.bektel.com>
To: antiljoxt@bordonaro.de
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="BME42488.1093670633/mail.bektel.com"
Subject: Returned mail: User unknown
Auto-Submitted: auto-generated (failure)
X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on 
pluto94.plusserver.de
X-Spam-Status: No, hits=0.0 required=6.5 tests=none autolearn=ham version=2.64
X-Spam-Level: 
X-UIDL: )4E!!CUi!!M?,!!`,;!!

BODY:
The original message was received at Sat, 28 Aug 2004 00:22:52 -0500 (CDT) from exprod5mx126.postini.com [12.158.34.40]

----- The following addresses had permanent delivery errors ----- <perry@bektel.com>

Attachment 1:
Reporting-MTA: dns; bektel.com
Arrival-Date: Sat, 28 Aug 2004 00:22:52 -0500 (CDT)

Final-Recipient: RFC822; perry@bektel.com
Action: failed
Status: 5.1.1
Remote-MTA: X-Unix; mirapoint
Diagnostic-Code: smtp; 550 5.1.1 User unknown
Last-Attempt-Date: Sat, 28 Aug 2004 00:23:53 -0500 (CDT)

Attachment 2:
Caiils (Super Vigara) at $2.75 per dose 
Radey to boost yuor sex lfie? Poitisve?
Tmie to do it rgiht now.
Oderr Caiils at inrceibdly low prices

$2.75 per dose. Unbelivable
Reomve me 

[pfalzpower]

Spamassissin testet auch nicht

Code: Select all

X-Spam-Status: No, hits=0.0 required=6.5 [b]tests=none [/b]autolearn=ham version=2.64 

Check mal deine Config.

Und wegen den verschiedenen Mail Addys, versuche die Catch All Accounts zu vermeiden, so bekommste auch weniger.

[dino23]

Code: Select all

Return-Path: <MAILER-DAEMON@pluto94.plusserver.de>
Received: from ns.rnd.runnet.ru (ns.rnd.runnet.ru [195.208.245.251])
	by pluto94.plusserver.de (8.12.10/8.12.10/SuSE Linux 0.7) with ESMTP id i7U5VCwL002109
	for <argotab@bordonaro.de>; Mon, 30 Aug 2004 07:31:12 +0200
Received: from localhost (localhost)
	by ns.rnd.runnet.ru (8.12.11/8.9.3) id i7TNZx5c022639;
	Mon, 30 Aug 2004 09:31:10 +0400 (MSD)
Date: Mon, 30 Aug 2004 09:31:10 +0400 (MSD)
From: Mail Delivery Subsystem <MAILER-DAEMON@ns.rnd.runnet.ru>
Message-Id: <200408300531.i7TNZx5c022639@ns.rnd.runnet.ru>
To: <argotab@bordonaro.de>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="i7TNZx5c022639.1093843870/ns.rnd.runnet.ru"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on 
	pluto94.plusserver.de
X-Spam-Status: No, hits=5.6 required=6.5 tests=HTML_20_30,HTML_FONTCOLOR_RED,
	HTML_MESSAGE,OBFUSCATING_COMMENT,SAVE_UP_TO autolearn=no version=2.64
X-Spam-Level: *****
X-UIDL: `d!#!O+C!!Si)"!XG%#!

[/code]

[onkelchen]

Code: Select all

[..]
X-Spam-Status: No, hits=5.6 required=6.5 tests=none autolearn=ham version=2.64 
[..]

Du hast ein relativ hohes Level, bis Spam aussortiert wird. Vielleicht solltest du mal $sa_tag2_level_deflt bzw. $sa_kill_level_deflt in deiner amavisd.conf anpasen

[schl]

falls Du ein CATCH-ALL hast, dann dieses abschalten. und schon sind die spams weg (zum großteil zumindest)