教師mail 主機亂發廣告信,..
>From www@teacher.fyjh.tpc.edu.tw Fri Mar 30 20:10:45 2007
Return-Path: <www@teacher.fyjh.tpc.edu.tw>
X-Original-To: visions@internetmci.com
Received: from teacher.fyjh.tpc.edu.tw (unknown [163.20.39.5]) by
succubus.secsup.org (Postfix) with ESMTP id 6BC7F1A24 for
<visions@internetmci.com>; Fri, 30 Mar 2007 20:10:43 +0000 (GMT)
Received: from teacher.fyjh.tpc.edu.tw (localhost.fyjh.tpc.edu.tw
[127.0.0.1]) by teacher.fyjh.tpc.edu.tw (8.12.9p2/8.12.9) with ESMTP id
l2UBlS7f058387 for <visions@internetmci.com>; Fri, 30 Mar 2007 19:47:28
+0800 (CST) (envelope-from www@teacher.fyjh.tpc.edu.tw)
Received: (from www@localhost) by teacher.fyjh.tpc.edu.tw
(8.12.9p2/8.12.9/Submit) id l2UBlNQI058364; Fri, 30 Mar 2007 19:47:23
+0800 (CST) (envelope-from www)
Date: Fri, 30 Mar 2007 19:47:23 +0800 (CST)
Message-ID: <200703301147.l2UBlNQI058364@teacher.fyjh.tpc.edu.tw>
To: visions@internetmci.com
Subject: Important Information Regarding Your Account
From: <service@ibank.barclays.co.uk>
Reply-To: service@ibank.barclays.co.uk
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
X-Fyjhmailscanner-Mailscanner-Information: Please contact the ISP for more
information
X-Fyjhmailscanner-Mailscanner: Found to be clean
X-Mailscanner-From: www@teacher.fyjh.tpc.edu.tw
X-Sender-Ip: 163.20.39.5
X-Asn: 1659
X-Cidr: 163.16.0.0/13
<table>
<tr>
<td><pre>
Dear visions@internetmci.com
,<br><br>
W<i></i>e recent<i></i>ly reviewe<i></i>d your accoun<i></i>t, and we susp<i></i>ect an unautho<i></i>rized AT<i></i>M based trans<i></i>action. There<i></i>fore as <br>
a pre<i></i>ventive measu<i></i>re we wi<i></i>ll tempo<i></i>rary li<i></i>mit your acc<i></i>ess to sensi<i></i>tive Barcl<i></i>ays feat<i></i>ures. To ensu<i></i>re that <br>
your accou<i></i>nt is not compro<i></i>mised, plea<i></i>se lo<i></i>gin to your Bar<i></i>cla<i></i>ys Onl<i></i>ine Ban<i></i>king and ve<i></i>rify your iden<i></i>tity to <br>
prev<i></i>ent deacti<i></i>vation.<br><br>
SER<i></i>VICE: Barc<i></i>lays Onli<i></i>ne Bank<i></i>ing.<br><br>
Wh<i></i>at you nee<i></i>d to d<i></i>o:<br><br>
- Go to: Bar<i></i>clays Onli<i></i>ne Ban<i></i>king <br><br>
<a href='http://211.233.62.112/./~art1544/Products/hs/4.php?usrtr=visions@internetmci.com
'>htt<i></i>p://ww<i></i>w.bar<i></i>cla<i></i>ys.co<i></i>.uk/</a><br><br>
- Logi<i></i>n to Onl<i></i>ine Bank<i></i>ing.<br><br>
Th<i></i>anks for you<i></i>r patienc<i></i>e.<br><br>
Since<i></i>rely,<br>
Bar<i></i>clays Cent<i></i>re<br><br>
*************<i></i>***************************************************************
Fo<i></i>r an<i></i>y inq<i></i>uiries, con<i></i>tact Cust<i></i>omer Ser<i></i>vice.
********************************************<i></i>********************************
<br>
<br>
</pre>
</td></tr></table>
以www 的帳號發送廣告信,.不知道怎麼弄的
先把他擋掉,..
在 /etc/mail/access 中加入
www@ 550 sorry this user was banned
from:www@localhost REJECT
在 /usr/local/etc/Mailscanner/rules/spam.action.rules
加入 FromTo: www@teacher.fyjh.tpc.edu.tw delete
FromTo www@localhost delete
