Отправляет email-рассылки с помощью сервиса Sendsay

Подскажите pcre выражение для спама в header_checks в Postfix 2.1.5 FreeBSD

Добрый день comp,

main.cf :
header_checks = pcre:/usr/local/etc/postfix/header_checks
header_checks :
???!
После спамассесина заголовок письма имеет вид:

The Bat :
*****SPAM***** Срочное предложение!!!
Заголовок письма :
=?koi8-r?B?89LP3s7PINrBy8Ha2dfBytTFIC0g0M8gyM/Sz9vFzdU6?=
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_18D6_01C5346B.E1ADDCA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-SpamTest-Categories: Spam > Recent Terms
X-SpamTest-Info: Profile: Formal (216/050328)
X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)
X-SpamTest-Info: Profile: SysLog
X-SpamTest-Info: Profile: Marking Spam - Subject (2/030321)
X-SpamTest-Method: Content: Spam
X-SpamTest-Status: SPAM
X-SpamTest-Version: SMTP-Filter Version 2.1.1 [0150], SpamtestISP/Release
X-Spam-Prev-Subject: [!! SPAM]
=?koi8-r?B?89LP3s7PINrBy8Ha2dfBytTFIC0g0M8gyM/Sz9vFzdU6?=
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on
mail.avtoprime.spb.ru
X-Spam-Report:
* 2.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but

should
* 0.7 SUBJ_ALL_CAPS Subject is all capitals
* 1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO

* 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
* [score: 0.5014]
* 0.1 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag
* 0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above

50%
* [cf: 100]
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.1 HTML_FONT_BIG BODY: HTML tag for a big font size
* 0.0 HTML_90_100 BODY: Message is 90% to 100% HTML
* 1.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 0.4 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
* [203.229.109.125 listed in combined.njabl.org]
* 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?203.229.109.125>]

* 0.0 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server

* [203.229.109.125 listed in dnsbl.sorbs.net]
X-Spam-Status: Yes, score=7.6 required=5.0 tests=BAYES_50,HTML_90_100,
HTML_FONT_BIG,HTML_MESSAGE,HTML_TAG_EXIST_TBODY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_HELO_IP_MISMATCH,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_NJABL_PROXY,RCVD_IN_SORBS_WEB,
RCVD_NUMERIC_HELO,SUBJ_ALL_CAPS autolearn=no version=3.0.2
X-Spam-Level: *******
Заранее спасибо!

Ответить   Пименов Алексей Валентинович Tue, 29 Mar 2005 15:08:35 +0400 (#341796)