The last week I receive a lot of SPAM. Only e-mail message with only on URL in it. I use ClamAV0.96.2 with ClamSup 1.3.0, DNS blacklists and SURBL.

Anyone any idea how I can block this e-mails?

I have been getting these quite frequently too myself. If you are any good at scripting you could always check to see if body only contains an url and if it does, delete it.

Sender (server's IP address) is always the same or random? Is it listed in some RBL?
From: address is the same, random or your own?

Sender (server's IP address) is always random. And from address display name is random and e-mail address is my own.

I have already try to make a script that check if the body contains one line and begins with http://. But I’m not very good at vb scripts. So it didn’t work…

Could you name at least one or two servers that send those emails or test their IP addresses in http://www.blacklistalert.org yourself.

Legit emails can contain only site url. You talk with somebody, they ask about that funny video on youtube and you send them url to that video. If you want to filter such emails, get email client with Bayes filtering support and train it.

a view IP addresses:

188.41.83.37
188.54.84.210
213.191.224.174
151.51.56.255
62.159.109.4

bl.spamcop.net - listed
cbl.abuseat.org - listed
uceprotect level1, level-2 and level3 - listed
zen.spamhaus.org - some are already listed. others should be listed when spamhaus.org syncs with cbl.

Check your current RBL configuration.
Enable greylisting in case those spams slipped in before being listed on RBL.

Thanks, I have add two blacklist where the on. See if this helps.

If you add uceprotect, learn how this rbl works. This rbl is automatic and higher levels have higher rate of false positives.

Ok, thanks for mention