I also am using Dooms spam setting although a bit more aggresively but continue to get 100 or more spam messages a day
I am using the VBS script below as well. Below that is a header with the word [SPAM] in it. I have no clue where that is coming from because I stopped using SA on a centos system (thinking that is where the [SPAM] was coming from.
I turned off all references to insert SPAM into the subject block.
How can I create a rule to delete anything that has spam in the subject block? I tried it doesn't work for some reason.
100 to 150 spam emails a day is unacceptable
Below are pics of my settings
I also know I am being very agressive but I don't know of any way to stop it.
My backup mail server has the same settings (but is running windows server 2008) and it just rejects everything
HELP PLEASE
(Script)
Sub OnClientConnect(oClient)
Dim geoip
Result.Value = 1
set geoip = CreateObject("GeoIPCOMEx.GeoIPEx")
geoip.set_db_path("c:\Program files\hmailserver\geoip\")
geoip.find_by_addr(oClient.IPAddress)
country = geoip.country_code
If (country = "LH" ) Then
Result.Value = 0
End if
If (country = "LN" ) Then
Result.Value = 0
End if
If (country = "NL" ) Then
Result.Value = 1
End if
If (country = "US" ) Then
Result.Value = 0
End if
If (country = "SE" ) Then
Result.Value = 0
End if
If (country = "CA" ) Then
Result.Value = 0
End if
If (Result.Value = 1 ) Then ' Rejected
EventLog.Write("Geo-IP rejected:"+Chr(34)+vbTab+oClient.IPAddress+vbTab+Chr(34)+geoip.country_code+" "+geoip.country_name)
End if
' Sub OnAcceptMessage(oClient, oMessage)
' End Sub
' Sub OnDeliveryStart(oMessage)
' End Sub
' Sub OnDeliverMessage(oMessage)
' End Sub
' Sub OnBackupFailed(sReason)
' End Sub
' Sub OnBackupCompleted()
End Sub
' End Sub
' Sub OnAcceptMessage(oClient, oMessage)
' End Sub
' Sub OnDeliverMessage(oMessage)
' End Sub
' Sub OnBackupFailed(sReason)
' End Sub
' Sub OnBackupCompleted()
' End Sub
Sub OnAcceptMessage(oClient, oMessage)
If oClient.Username <> "" Then
If LCase(oClient.Username) <> LCase(oMessage.FromAddress) Then
Result.Value = 2
Result.Message = "You are only allowed to send from your own account"
End If
End If
End Sub
(End of eventhandler script)
Spam email header
X-Vipre-Scanned: 00324C4C00318A00324D99-TDI
Return-Path:
b1.DirectCashSource.0-125639ad-797e.rsegroup.com.-BESCHER@mx2.superbcashcentral.com
Delivered-To:
BESCHER@rsegroup.com
Received: from mx2.superbcashcentral.com ([67.218.229.23])
by pop.rsegroup.com
; Sat, 18 Aug 2012 05:05:24 -0500
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=v1; d=superbcashcentral.com;
b=cToTPwwH1D/L9Ptl9BPr1dmWyzfJF7kSsbr28SzVIs/jCzTAXHu1FYQUKJviyPc9T+luDcKkUeEV3n8bbhmBOJ9+OPlupfoQ4HZqc5H8tJfX6/6hkUGx25/ciATTp/9Q;
Received: (from daemon@localhost)
by mx2.superbcashcentral.com (8.14.5/8.14.5) id q7IA0eZi043113;
Sat, 18 Aug 2012 06:00:40 -0400 (EDT)
Date: Sat, 18 Aug 2012 06:03:41 -0400 (EDT)
Message-Id: <
201208181000.q7IA0eZi043113@mx2.superbcashcentral.com>
From: Pending Deposit <
DirectCashSource@mx2.superbcashcentral.com>
To: <
BESCHER@rsegroup.com>
List-Unsubscribe: <
http://mx2.superbcashcentral.com/remove ... -BESCHER?r>, <mailto:
r.DirectCashSource.0-125639ad-797e.rsegroup.com.-BESCHER@mx2.superbcashcentral.com?subject=remove>
Subject: [SPAM] Complete your deposit form here
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"