Dotaz: Slovenske spamy a spamassasin

[Ladislav]

Zdravim, uz asi mesiac mam problem so slovenskymi spamami ktore spamassasin neregistruje a neviem ho donutit to spravne odchytavat:
ukazka mailu:

Takto sa môžete NAVŽDY zbaviť chrápania
http://ysa.aiyananicole.com/

Prostriedok proti chrápaniu pre nerušený spánok a vzťah » 
http://ysa.aiyananicole.com/


http://ysb.aiyananicole.com/

Ďalšie informácie » http://ysb.aiyananicole.com/


http://ysc.aiyananicole.com/

Ďalšie informácie » http://ysc.aiyananicole.com/
Neruš iných: hodinky proti chrápaniu

http://msk01.aiyananicole.com/ http://msk16.aiyananicole.com/
http://msk04.aiyananicole.com/ http://msk09.aiyananicole.com/
http://msk07.aiyananicole.com/

  Od-hlásiť tu 
http://aiyananicole.com/00sk109/u.php?M=JWRTA132418YKNHT&TFP=ZYW&C=SEXAEd04f5595e9067361a6b33ffa51b05542YYBRK&T=FQ&L=22&NGF=NX&N=565&Z=W

Je tu dokonalá metóda proti chrápaniu

hlavicka mailu:

Return-Path: noreply-knjjZgftKnank.zsQpt@aiyananicole.com
X-Original-To: ****@*****.sk
Delivered-To: ****@*****.sk
Received: from localhost (localhost [127.0.0.1])
	by mail.*****.sk (Postfix) with ESMTP id 12799120F3
	for <****@*****.sk>; Sun,  4 Dec 2016 13:47:06 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at *****.sk
X-Spam-Flag: NO
X-Spam-Score: 4.611
X-Spam-Level: ****
X-Spam-Status: No, score=4.611 tagged_above=2 required=6.31 tests=[BAYES_80=2,
	DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
	FROM_EXCESS_BASE64=0.979, HTML_IMAGE_ONLY_28=1.404,
	HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.723, RCVD_IN_BRBL_LASTEXT=1.449,
	RP_MATCHES_RCVD=-3.096, URIBL_ABUSE_SURBL=1.25, URIBL_BLOCKED=0.001]
	autolearn=no
Received: from mail.*****.sk ([127.0.0.1])
	by localhost (mail.*****.sk [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id kAUEyQZwX-kz for ****@*****.sk;
	Sun,  4 Dec 2016 13:47:04 +0100 (CET)
Received: from dolorous.aiyananicole.com (dolorous.aiyananicole.com [185.140.109.235])
	by mail.*****.sk (Postfix) with ESMTP id 965C78012
	for ****@*****.sk; Sun,  4 Dec 2016 13:47:04 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=aiyananicole.com;
 h=To:Subject:From:Message-ID:Date:MIME-Version:Content-Type:Content-Transfer-Encoding; i=editamxqtz2alakatos@aiyananicole.com;
 bh=0aDna/5L8TQWo1GS2Rf+Z7mNg+8=;
 b=gtXlPlcu6kOcPIXjD5j7Tnb/fTA3WPuMVqc67mITtw/HUwtQvckLmQLXGbTPQIt+MmN6NpmAeGXn
   C+zSP2Y8e6NDk4yrC38zD+iulzTahTaQmBK+PuMrbO+NR1FzjveCTAPcPayu3iW0hhOsIi1wQg3v
   +YXs8RX9zrkkds6dRYg=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=aiyananicole.com;
 b=VCd7DLnRWL3/JxQC1S7oX52XdfgRbQ+fpdDwUfUW8XloElp2Yl564pvjY+snAkOrK1oz6FDovGJ/
   T7PtOeLn2y7A9gGJvm9nucIllpzwUbig+UQfT3aNJVtfA1Vtzc38zCCe2XaxE9d57EQn41bFHJcA
   cfUnN5LTtyiHGadAC4A=;
To: ****@*****.sk
Subject: =?UTF-8?Q?Prostriedok_proti_chr=C3=A1paniu_pre_neru=C5=A1en=C3=BD_sp=C3=A1nok_a_vz=C5=A5ah?=
From: =?UTF-8?B?RWRpdGEgTGFrYXRvcw==?= editamxqtz2alakatos@aiyananicole.com
Message-ID: KJrwx04efQ5nj4pXx1F3pAYAK@vps
Date: Sun, 04 Dec 2016 12:30:26 +0000
MIME-Version: 1.0
Precedence: bulk
X-Mailer: KMail/1.9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Co s tym ? Ako donutim SpamAssasin to zachytavat ? Dakujem

Odpovědi

[sharky]

No slovenske, ako slovenske. Posielaju to zmrdi, ktory si za par evri, kupia VPS a natrtk... tisicky emailov. O mesiac to zmenia, a tak furt dookola. Ked si das whois domeny aiyananicole.com:

Domain Name: AIYANANICOLE.COM Registry Domain ID: 2057021651_DOMAIN_COM-VRSN Registrar WHOIS Server: whois.enom.com Registrar URL: www.enom.com Updated Date: 2016-09-03T10:27:05.00Z Creation Date: 2016-09-03T17:27:00.00Z Registrar Registration Expiration Date: 2017-09-03T17:27:00.00Z Registrar: ENOM, INC. Registrar IANA ID: 48 Reseller: NAMECHEAP.COM Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited Registry Registrant ID: Registrant Name: WHOISGUARD PROTECTED Registrant Organization: WHOISGUARD, INC. Registrant Street: P.O. BOX 0823-03411 Registrant City: PANAMA Registrant State/Province: PANAMA Registrant Postal Code: 0 Registrant Country: PA Registrant Phone: +507.8365503 Registrant Phone Ext: Registrant Fax: +51.17057182 Registrant Fax Ext: Registrant Email: 446AA586EEAF490EB9B7714B4FEC516E.PROTECT@WHOISGUARD.COM

Pingnes DND server, dostanes IP adresu:

inetnum: 185.140.108.0 - 185.140.108.255 netname: EAN-NUM-LOG descr: VPS SERVERS country: HU admin-c: ACRO384-RIPE tech-c: ACRO384-RIPE status: ASSIGNED PA mnt-by: ACRO384-MNT created: 2016-03-07T17:23:09Z last-modified: 2016-03-07T17:23:09Z source: RIPE

role: EAN NUM LOG Kft address: Hungary address: 1027 Budapest address: Bem utca 6. phone: +36702162941 abuse-mailbox: abuse@edm-oneworld.com nic-hdl: ACRO384-RIPE mnt-by: ACRO384-MNT created: 2016-02-29T18:56:01Z last-modified: 2016-04-14T14:25:42Z source: RIPE # Filtered

% Information related to '185.140.108.0/23AS48131'

route: 185.140.108.0/23 descr: ENLK2-NET descr: VPS SERVERS origin: AS48131 mnt-by: ACRO384-MNT created: 2016-03-17T17:10:08Z last-modified: 2016-03-17T17:10:23Z source: RIPE

A mas hned madarskeho poskytovatela VPS: http://vpsszerver.net/

Najlepsie blokovat cely rozsah IP adries: 185.140.108.0 - 185.140.108.255

A mas pokoj !!!

[Ladislav]

Vdaka, skusim zadat do iptables...

[Matus]

Zdravím, mám podobný problém s takýmito emailami. Keď mi prišiel prvý takýto, tak som hneď klikol dole na "Odhlásiť tu" ktorý tam bol. Zdá sa ale, že toto malo za následok ešte väčšie spamovanie (chytré nie?). Správy chodili ďalej a ďalej. Začalo mi to už vadiť. Horšie však bolo to, že sa ťažko filtrujú - každý je skoro iný (dokonca aj ten text "odhlásiť tu" - vždy je niekde v slove medzera, náhodne). Až potom som si však všimol odkaz, na ktorý tento text smeruje - vždy obsahuje tieto písmenká: /u.php?M

Použite preto toto na filtrovanie a rovno mazanie podobných emailov.