服务端发送垃圾邮件-1
| rambo@mail:~$ cat test-spam-email.txt |
| Subject: 恭喜您!您赢得了奖品! |
| From: zhangsan@labexample.com |
| To: rambo@labexample.com |
| |
| 亲爱的用户, |
| 您已被选为我们抽奖活动的获胜者!请点击以下链接以领取您的奖品: |
| http://example.com/win |
| 请尽快回复,因为奖品数量有限! |
| |
| |
| # 发送垃圾测试邮件 |
| rambo@mail:~$ cat /home/rambo/test-spam-email.txt | /usr/bin/spamc -f | /usr/sbin/sendmail rambo@labexample.com |
| |
| |
| # 日志 |
| rambo@mail:~$ sudo tail -f /var/log/mail.log |
| 2024-10-17T19:42:27.937220-04:00 mail spamd[3373]: spamd: connection from localhost [::1]:60302 to port 783, fd 5 |
| 2024-10-17T19:42:27.937220-04:00 mail spamd[3373]: spamd: connection from localhost [::1]:60302 to port 783, fd 5 |
| 2024-10-17T19:42:27.943412-04:00 mail spamd[3373]: spamd: setuid to rambo succeeded |
| 2024-10-17T19:42:27.943412-04:00 mail spamd[3373]: spamd: setuid to rambo succeeded |
| 2024-10-17T19:42:27.949928-04:00 mail spamd[3373]: spamd: processing message (unknown) for rambo:1000 |
| 2024-10-17T19:42:27.949928-04:00 mail spamd[3373]: spamd: processing message (unknown) for rambo:1000 |
| 2024-10-17T19:42:28.762674-04:00 mail spamd[3373]: spamd: identified spam (5.5/3.0) for rambo:1000 in 0.8 seconds, 281 bytes. |
| 2024-10-17T19:42:28.762674-04:00 mail spamd[3373]: spamd: identified spam (5.5/3.0) for rambo:1000 in 0.8 seconds, 281 bytes. |
| 2024-10-17T19:42:28.763779-04:00 mail spamd[3373]: spamd: result: Y 5 - DOS_BODY_HIGH_NO_MID,MISSING_DATE,MISSING_MID,NO_RECEIVED,NO_RELAYS,PP_MIME_FAKE_ASCII_TEXT scantime=0.8,size=281,user=rambo,uid=1000,required_score=3.0,rhost=localhost,raddr=::1,rport=60302,mid=(unknown),autolearn=no autolearn_force=no |
| 2024-10-17T19:42:28.763779-04:00 mail spamd[3373]: spamd: result: Y 5 - DOS_BODY_HIGH_NO_MID,MISSING_DATE,MISSING_MID,NO_RECEIVED,NO_RELAYS,PP_MIME_FAKE_ASCII_TEXT scantime=0.8,size=281,user=rambo,uid=1000,required_score=3.0,rhost=localhost,raddr=::1,rport=60302,mid=(unknown),autolearn=no autolearn_force=no |
| 2024-10-17T19:42:28.775234-04:00 mail postfix/pickup[3370]: BD2AF1E2AFD: uid=1000 from=<rambo> |
| 2024-10-17T19:42:28.775234-04:00 mail postfix/pickup[3370]: BD2AF1E2AFD: uid=1000 from=<rambo> |
| 2024-10-17T19:42:28.783552-04:00 mail postfix/cleanup[3408]: BD2AF1E2AFD: message-id=<20241017234228.BD2AF1E2AFD@labexample.com> |
| 2024-10-17T19:42:28.783552-04:00 mail postfix/cleanup[3408]: BD2AF1E2AFD: message-id=<20241017234228.BD2AF1E2AFD@labexample.com> |
| 2024-10-17T19:42:28.784833-04:00 mail postfix/qmgr[3371]: BD2AF1E2AFD: from=<rambo@mail.example.com>, size=1298, nrcpt=1 (queue active) |
| 2024-10-17T19:42:28.784833-04:00 mail postfix/qmgr[3371]: BD2AF1E2AFD: from=<rambo@mail.example.com>, size=1298, nrcpt=1 (queue active) |
| 2024-10-17T19:42:28.789277-04:00 mail spamd[3045]: prefork: child states: II |
| 2024-10-17T19:42:28.789277-04:00 mail spamd[3045]: prefork: child states: II |
| 2024-10-17T19:42:28.794790-04:00 mail postfix/local[3410]: BD2AF1E2AFD: to=<rambo@labexample.com>, relay=local, delay=0.84, delays=0.83/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir) |
| 2024-10-17T19:42:28.794904-04:00 mail postfix/qmgr[3371]: BD2AF1E2AFD: removed |
| 2024-10-17T19:42:28.794790-04:00 mail postfix/local[3410]: BD2AF1E2AFD: to=<rambo@labexample.com>, relay=local, delay=0.84, delays=0.83/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir) |
| 2024-10-17T19:42:28.794904-04:00 mail postfix/qmgr[3371]: BD2AF1E2AFD: removed |
| |
| |
| # 查看邮件 |
| rambo@mail:~$ cat Maildir/new/1729208548.V802I3febfM793041.mail.example.com |
| Return-Path: <rambo@mail.example.com> |
| X-Original-To: rambo@labexample.com |
| Delivered-To: rambo@labexample.com |
| Received: by labexample.com (Postfix, from userid 1000) |
| id BD2AF1E2AFD; Thu, 17 Oct 2024 19:42:28 -0400 (EDT) |
| X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on mail.example.com |
| X-Spam-Flag: YES |
| X-Spam-Level: ***** |
| X-Spam-Status: Yes, score=5.5 required=3.0 tests=DOS_BODY_HIGH_NO_MID, |
| MISSING_DATE,MISSING_MID,NO_RECEIVED,NO_RELAYS,PP_MIME_FAKE_ASCII_TEXT |
| autolearn=no autolearn_force=no version=4.0.0 |
| X-Spam-Report: |
| * -0.0 NO_RECEIVED Informational: message has no Received headers |
| * 0.1 MISSING_MID Missing Message-Id: header |
| * 1.4 MISSING_DATE Missing Date: header |
| * -0.0 NO_RELAYS Informational: message was not relayed via SMTP |
| * 0.2 PP_MIME_FAKE_ASCII_TEXT BODY: MIME text/plain claims to be ASCII but |
| * isn't |
| * 3.7 DOS_BODY_HIGH_NO_MID High bit body and no message ID header |
| Subject: ***** SPAM SCORE ***** 恭喜您!您赢得了奖品! |
| From: zhangsan@labexample.com |
| To: rambo@labexample.com |
| X-Spam-Prev-Subject: 恭喜您!您赢得了奖品! |
| Message-Id: <20241017234228.BD2AF1E2AFD@labexample.com> |
| Date: Thu, 17 Oct 2024 19:42:27 -0400 (EDT) |
| |
| 亲爱的用户, |
| 您已被选为我们抽奖活动的获胜者!请点击以下链接以领取您的奖品: |
| http://example.com/win |
| 请尽快回复,因为奖品数量有限! |
| |
| |
服务端发送垃圾邮件-2
| # 发送垃圾测试邮件 |
| rambo@mail:~$ echo -e "XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X"| /usr/bin/spamc -f | /usr/sbin/sendmail rambo@labexample.com |
| |
| |
| # 查看垃圾测试邮件 |
| rambo@mail:~$ cat Maildir/new/1729208114.V802I3febfM993572.mail.example.com |
| Return-Path: <rambo@mail.example.com> |
| X-Original-To: rambo@labexample.com |
| Delivered-To: rambo@labexample.com |
| Received: by labexample.com (Postfix, from userid 1000) |
| id EDE471E2AFD; Thu, 17 Oct 2024 19:35:14 -0400 (EDT) |
| X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on mail.example.com |
| X-Spam-Flag: YES |
| X-Spam-Level: ******* |
| X-Spam-Status: Yes, score=7.9 required=3.0 tests=EMPTY_MESSAGE,MISSING_DATE, |
| MISSING_FROM,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT, |
| NO_HEADERS_MESSAGE,NO_RECEIVED,NO_RELAYS autolearn=no |
| autolearn_force=no version=4.0.0 |
| X-Spam-Report: |
| * 2.3 EMPTY_MESSAGE Message appears to have no textual parts |
| * 1.4 MISSING_DATE Missing Date: header |
| * -0.0 NO_RECEIVED Informational: message has no Received headers |
| * 1.0 MISSING_FROM Missing From: header |
| * 0.1 MISSING_MID Missing Message-Id: header |
| * 1.8 MISSING_SUBJECT Missing Subject: header |
| * 1.2 MISSING_HEADERS Missing To: header |
| * -0.0 NO_RELAYS Informational: message was not relayed via SMTP |
| * 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 |
| * headers |
| Message-Id: <20241017233514.EDE471E2AFD@labexample.com> |
| Date: Thu, 17 Oct 2024 19:35:14 -0400 (EDT) |
| From: rambo <rambo@mail.example.com> |
| |
| XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X |
| Subject: ***** SPAM SCORE ***** |
| X-Spam-Prev-Subject: (nonexistent) |
| |
| |
| |
| # 日志 |
| rambo@mail:~$ sudo tail -f /var/log/mail.log |
| 2024-10-17T19:35:14.865268-04:00 mail spamd[3373]: spamd: connection from localhost [::1]:48336 to port 783, fd 5 |
| 2024-10-17T19:35:14.865268-04:00 mail spamd[3373]: spamd: connection from localhost [::1]:48336 to port 783, fd 5 |
| 2024-10-17T19:35:14.870601-04:00 mail spamd[3373]: spamd: setuid to rambo succeeded |
| 2024-10-17T19:35:14.870601-04:00 mail spamd[3373]: spamd: setuid to rambo succeeded |
| 2024-10-17T19:35:14.886138-04:00 mail spamd[3373]: spamd: processing message (unknown) for rambo:1000 |
| 2024-10-17T19:35:14.886138-04:00 mail spamd[3373]: spamd: processing message (unknown) for rambo:1000 |
| 2024-10-17T19:35:14.962630-04:00 mail spamd[3373]: spamd: identified spam (7.9/3.0) for rambo:1000 in 0.1 seconds, 69 bytes. |
| 2024-10-17T19:35:14.962630-04:00 mail spamd[3373]: spamd: identified spam (7.9/3.0) for rambo:1000 in 0.1 seconds, 69 bytes. |
| 2024-10-17T19:35:14.963265-04:00 mail spamd[3373]: spamd: result: Y 7 - EMPTY_MESSAGE,MISSING_DATE,MISSING_FROM,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,NO_HEADERS_MESSAGE,NO_RECEIVED,NO_RELAYS scantime=0.1,size=69,user=rambo,uid=1000,required_score=3.0,rhost=localhost,raddr=::1,rport=48336,mid=(unknown),autolearn=no autolearn_force=no |
| 2024-10-17T19:35:14.963265-04:00 mail spamd[3373]: spamd: result: Y 7 - EMPTY_MESSAGE,MISSING_DATE,MISSING_FROM,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,NO_HEADERS_MESSAGE,NO_RECEIVED,NO_RELAYS scantime=0.1,size=69,user=rambo,uid=1000,required_score=3.0,rhost=localhost,raddr=::1,rport=48336,mid=(unknown),autolearn=no autolearn_force=no |
| 2024-10-17T19:35:14.975092-04:00 mail postfix/pickup[3370]: EDE471E2AFD: uid=1000 from=<rambo> |
| 2024-10-17T19:35:14.975092-04:00 mail postfix/pickup[3370]: EDE471E2AFD: uid=1000 from=<rambo> |
| 2024-10-17T19:35:14.983882-04:00 mail postfix/cleanup[3382]: EDE471E2AFD: message-id=<20241017233514.EDE471E2AFD@labexample.com> |
| 2024-10-17T19:35:14.983882-04:00 mail postfix/cleanup[3382]: EDE471E2AFD: message-id=<20241017233514.EDE471E2AFD@labexample.com> |
| 2024-10-17T19:35:14.985815-04:00 mail postfix/qmgr[3371]: EDE471E2AFD: from=<rambo@mail.example.com>, size=1273, nrcpt=1 (queue active) |
| 2024-10-17T19:35:14.985815-04:00 mail postfix/qmgr[3371]: EDE471E2AFD: from=<rambo@mail.example.com>, size=1273, nrcpt=1 (queue active) |
| 2024-10-17T19:35:14.994911-04:00 mail postfix/local[3384]: EDE471E2AFD: to=<rambo@labexample.com>, relay=local, delay=0.12, delays=0.11/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir) |
| 2024-10-17T19:35:14.994911-04:00 mail postfix/local[3384]: EDE471E2AFD: to=<rambo@labexample.com>, relay=local, delay=0.12, delays=0.11/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir) |
| 2024-10-17T19:35:14.995751-04:00 mail postfix/qmgr[3371]: EDE471E2AFD: removed |
| 2024-10-17T19:35:14.995751-04:00 mail postfix/qmgr[3371]: EDE471E2AFD: removed |
| |
常见邮件客户端中设置过滤规则
| 1、Thunderbird |
| Thunderbird 是一个流行的开源邮件客户端。您可以通过以下步骤设置垃圾邮件过滤规则: |
| 打开 Thunderbird 并选择您的邮箱账户 |
| 点击“工具”菜单,选择 “邮件过滤” |
| 点击 “新建”,创建一个新的过滤规则 |
| |
| 设置过滤条件: |
| 选择 “自定义”,并在字段中输入 X-Spam-Flag |
| 设置条件为 “等于”,并在值中输入 YES |
| |
| 选择执行操作: |
| 选择 “移动到文件夹”,并选择或创建垃圾邮件文件夹 |
| 保存规则,邮件客户端将自动根据 SpamAssassin 的标记来过滤垃圾邮件 |
| |
| |
| 2、Outlook |
| 在 Outlook 中,您可以通过以下步骤创建过滤规则: |
| 打开 Outlook 并转到 “文件” > “管理规则和通知” |
| 点击 “新建规则”,选择 “应用规则到接收的邮件” |
| 在条件部分选择 “邮件包含特定字词” |
| 选择 “在邮件头中”,并输入 X-Spam-Flag: YES |
| 在操作部分选择 “将邮件移到指定文件夹”,选择或创建垃圾邮件文件夹 |
| 保存规则,之后任何被 SpamAssassin 标记的垃圾邮件都会自动移动到指定的文件夹 |
| |
| 3、Apple Mail (macOS) |
| 在 Apple Mail 中,您可以通过以下步骤设置垃圾邮件过滤规则: |
| 打开 Apple Mail 并选择 “邮件” > “偏好设置” |
| 转到 “规则” 标签页,点击 “添加规则” |
| 为规则命名,设置条件为: |
| “邮件头包含 X-Spam-Flag”,并设置为 “YES” |
| 设置操作为 “将邮件移动到垃圾邮件” 文件夹 |
| 保存规则,Apple Mail 将根据规则自动过滤垃圾邮件。 |
| |
| |
| # 调整客户端垃圾邮件策略 |
| 大部分邮件客户端(如 Thunderbird、Outlook 和 Apple Mail)都有内置的垃圾邮件过滤功能。这些功能会与 SpamAssassin 产生一定的协同作用,进一步提高垃圾邮件识别率 |
| 您可以在客户端中调整这些设置,以便结合服务器端 SpamAssassin 过滤器使用 |
| |
| 例如: |
| Thunderbird:启用 “垃圾邮件控制”,客户端会根据邮件头中的 SpamAssassin 标记以及自身的垃圾邮件规则共同判断 |
| Outlook:可以调整垃圾邮件保护级别,以自动将 SpamAssassin 标记的邮件移至垃圾邮件文件夹 |
| Apple Mail:可以结合规则和内置的垃圾邮件过滤机制,进一步增强垃圾邮件的自动检测和处理 |
| |
| |
| # 定期检查垃圾邮件文件夹 |
| 即便有 SpamAssassin 和客户端规则的双重保障,偶尔也可能会有误判。因此,建议定期检查垃圾邮件文件夹,以确保没有误将正常邮件标记为垃圾邮件 |
| |
| |
【推荐】国内首个AI IDE,深度理解中文开发场景,立即下载体验Trae
【推荐】编程新体验,更懂你的AI,立即体验豆包MarsCode编程助手
【推荐】抖音旗下AI助手豆包,你的智能百科全书,全免费不限次数
【推荐】轻量又高性能的 SSH 工具 IShell:AI 加持,快人一步
· winform 绘制太阳,地球,月球 运作规律
· AI与.NET技术实操系列(五):向量存储与相似性搜索在 .NET 中的实现
· 超详细:普通电脑也行Windows部署deepseek R1训练数据并当服务器共享给他人
· 上周热点回顾(3.3-3.9)
· AI 智能体引爆开源社区「GitHub 热点速览」