邮件客户端如何设置邮件过滤

服务端发送垃圾邮件-1

rambo@mail:~$ cat test-spam-email.txt 
Subject: 恭喜您!您赢得了奖品!
From: zhangsan@labexample.com
To: rambo@labexample.com

亲爱的用户,
您已被选为我们抽奖活动的获胜者!请点击以下链接以领取您的奖品:
http://example.com/win
请尽快回复,因为奖品数量有限!


# 发送垃圾测试邮件
rambo@mail:~$ cat /home/rambo/test-spam-email.txt | /usr/bin/spamc -f | /usr/sbin/sendmail  rambo@labexample.com


# 日志
rambo@mail:~$ sudo tail -f /var/log/mail.log
2024-10-17T19:42:27.937220-04:00 mail spamd[3373]: spamd: connection from localhost [::1]:60302 to port 783, fd 5
2024-10-17T19:42:27.937220-04:00 mail spamd[3373]: spamd: connection from localhost [::1]:60302 to port 783, fd 5
2024-10-17T19:42:27.943412-04:00 mail spamd[3373]: spamd: setuid to rambo succeeded
2024-10-17T19:42:27.943412-04:00 mail spamd[3373]: spamd: setuid to rambo succeeded
2024-10-17T19:42:27.949928-04:00 mail spamd[3373]: spamd: processing message (unknown) for rambo:1000
2024-10-17T19:42:27.949928-04:00 mail spamd[3373]: spamd: processing message (unknown) for rambo:1000
2024-10-17T19:42:28.762674-04:00 mail spamd[3373]: spamd: identified spam (5.5/3.0) for rambo:1000 in 0.8 seconds, 281 bytes.
2024-10-17T19:42:28.762674-04:00 mail spamd[3373]: spamd: identified spam (5.5/3.0) for rambo:1000 in 0.8 seconds, 281 bytes.
2024-10-17T19:42:28.763779-04:00 mail spamd[3373]: spamd: result: Y  5 - DOS_BODY_HIGH_NO_MID,MISSING_DATE,MISSING_MID,NO_RECEIVED,NO_RELAYS,PP_MIME_FAKE_ASCII_TEXT scantime=0.8,size=281,user=rambo,uid=1000,required_score=3.0,rhost=localhost,raddr=::1,rport=60302,mid=(unknown),autolearn=no autolearn_force=no
2024-10-17T19:42:28.763779-04:00 mail spamd[3373]: spamd: result: Y  5 - DOS_BODY_HIGH_NO_MID,MISSING_DATE,MISSING_MID,NO_RECEIVED,NO_RELAYS,PP_MIME_FAKE_ASCII_TEXT scantime=0.8,size=281,user=rambo,uid=1000,required_score=3.0,rhost=localhost,raddr=::1,rport=60302,mid=(unknown),autolearn=no autolearn_force=no
2024-10-17T19:42:28.775234-04:00 mail postfix/pickup[3370]: BD2AF1E2AFD: uid=1000 from=<rambo>
2024-10-17T19:42:28.775234-04:00 mail postfix/pickup[3370]: BD2AF1E2AFD: uid=1000 from=<rambo>
2024-10-17T19:42:28.783552-04:00 mail postfix/cleanup[3408]: BD2AF1E2AFD: message-id=<20241017234228.BD2AF1E2AFD@labexample.com>
2024-10-17T19:42:28.783552-04:00 mail postfix/cleanup[3408]: BD2AF1E2AFD: message-id=<20241017234228.BD2AF1E2AFD@labexample.com>
2024-10-17T19:42:28.784833-04:00 mail postfix/qmgr[3371]: BD2AF1E2AFD: from=<rambo@mail.example.com>, size=1298, nrcpt=1 (queue active)
2024-10-17T19:42:28.784833-04:00 mail postfix/qmgr[3371]: BD2AF1E2AFD: from=<rambo@mail.example.com>, size=1298, nrcpt=1 (queue active)
2024-10-17T19:42:28.789277-04:00 mail spamd[3045]: prefork: child states: II
2024-10-17T19:42:28.789277-04:00 mail spamd[3045]: prefork: child states: II
2024-10-17T19:42:28.794790-04:00 mail postfix/local[3410]: BD2AF1E2AFD: to=<rambo@labexample.com>, relay=local, delay=0.84, delays=0.83/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir)
2024-10-17T19:42:28.794904-04:00 mail postfix/qmgr[3371]: BD2AF1E2AFD: removed
2024-10-17T19:42:28.794790-04:00 mail postfix/local[3410]: BD2AF1E2AFD: to=<rambo@labexample.com>, relay=local, delay=0.84, delays=0.83/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir)
2024-10-17T19:42:28.794904-04:00 mail postfix/qmgr[3371]: BD2AF1E2AFD: removed


# 查看邮件
rambo@mail:~$ cat Maildir/new/1729208548.V802I3febfM793041.mail.example.com 
Return-Path: <rambo@mail.example.com>
X-Original-To: rambo@labexample.com
Delivered-To: rambo@labexample.com
Received: by labexample.com (Postfix, from userid 1000)
	id BD2AF1E2AFD; Thu, 17 Oct 2024 19:42:28 -0400 (EDT)
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on mail.example.com
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.5 required=3.0 tests=DOS_BODY_HIGH_NO_MID,
	MISSING_DATE,MISSING_MID,NO_RECEIVED,NO_RELAYS,PP_MIME_FAKE_ASCII_TEXT
	autolearn=no autolearn_force=no version=4.0.0
X-Spam-Report: 
	* -0.0 NO_RECEIVED Informational: message has no Received headers
	*  0.1 MISSING_MID Missing Message-Id: header
	*  1.4 MISSING_DATE Missing Date: header
	* -0.0 NO_RELAYS Informational: message was not relayed via SMTP
	*  0.2 PP_MIME_FAKE_ASCII_TEXT BODY: MIME text/plain claims to be ASCII but
	*       isn't
	*  3.7 DOS_BODY_HIGH_NO_MID High bit body and no message ID header
Subject: ***** SPAM SCORE ***** 恭喜您!您赢得了奖品!
From: zhangsan@labexample.com
To: rambo@labexample.com
X-Spam-Prev-Subject: 恭喜您!您赢得了奖品!
Message-Id: <20241017234228.BD2AF1E2AFD@labexample.com>
Date: Thu, 17 Oct 2024 19:42:27 -0400 (EDT)

亲爱的用户,
您已被选为我们抽奖活动的获胜者!请点击以下链接以领取您的奖品:
http://example.com/win
请尽快回复,因为奖品数量有限!


服务端发送垃圾邮件-2

# 发送垃圾测试邮件
rambo@mail:~$ echo -e "XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X"| /usr/bin/spamc -f | /usr/sbin/sendmail rambo@labexample.com


# 查看垃圾测试邮件
rambo@mail:~$ cat Maildir/new/1729208114.V802I3febfM993572.mail.example.com 
Return-Path: <rambo@mail.example.com>
X-Original-To: rambo@labexample.com
Delivered-To: rambo@labexample.com
Received: by labexample.com (Postfix, from userid 1000)
	id EDE471E2AFD; Thu, 17 Oct 2024 19:35:14 -0400 (EDT)
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on mail.example.com
X-Spam-Flag: YES
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.9 required=3.0 tests=EMPTY_MESSAGE,MISSING_DATE,
	MISSING_FROM,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,
	NO_HEADERS_MESSAGE,NO_RECEIVED,NO_RELAYS autolearn=no
	autolearn_force=no version=4.0.0
X-Spam-Report: 
	*  2.3 EMPTY_MESSAGE Message appears to have no textual parts
	*  1.4 MISSING_DATE Missing Date: header
	* -0.0 NO_RECEIVED Informational: message has no Received headers
	*  1.0 MISSING_FROM Missing From: header
	*  0.1 MISSING_MID Missing Message-Id: header
	*  1.8 MISSING_SUBJECT Missing Subject: header
	*  1.2 MISSING_HEADERS Missing To: header
	* -0.0 NO_RELAYS Informational: message was not relayed via SMTP
	*  0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822
	*      headers
Message-Id: <20241017233514.EDE471E2AFD@labexample.com>
Date: Thu, 17 Oct 2024 19:35:14 -0400 (EDT)
From: rambo <rambo@mail.example.com>

XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X
Subject: ***** SPAM SCORE ***** 
X-Spam-Prev-Subject: (nonexistent)



# 日志
rambo@mail:~$ sudo tail -f /var/log/mail.log
2024-10-17T19:35:14.865268-04:00 mail spamd[3373]: spamd: connection from localhost [::1]:48336 to port 783, fd 5
2024-10-17T19:35:14.865268-04:00 mail spamd[3373]: spamd: connection from localhost [::1]:48336 to port 783, fd 5
2024-10-17T19:35:14.870601-04:00 mail spamd[3373]: spamd: setuid to rambo succeeded
2024-10-17T19:35:14.870601-04:00 mail spamd[3373]: spamd: setuid to rambo succeeded
2024-10-17T19:35:14.886138-04:00 mail spamd[3373]: spamd: processing message (unknown) for rambo:1000
2024-10-17T19:35:14.886138-04:00 mail spamd[3373]: spamd: processing message (unknown) for rambo:1000
2024-10-17T19:35:14.962630-04:00 mail spamd[3373]: spamd: identified spam (7.9/3.0) for rambo:1000 in 0.1 seconds, 69 bytes.
2024-10-17T19:35:14.962630-04:00 mail spamd[3373]: spamd: identified spam (7.9/3.0) for rambo:1000 in 0.1 seconds, 69 bytes.
2024-10-17T19:35:14.963265-04:00 mail spamd[3373]: spamd: result: Y  7 - EMPTY_MESSAGE,MISSING_DATE,MISSING_FROM,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,NO_HEADERS_MESSAGE,NO_RECEIVED,NO_RELAYS scantime=0.1,size=69,user=rambo,uid=1000,required_score=3.0,rhost=localhost,raddr=::1,rport=48336,mid=(unknown),autolearn=no autolearn_force=no
2024-10-17T19:35:14.963265-04:00 mail spamd[3373]: spamd: result: Y  7 - EMPTY_MESSAGE,MISSING_DATE,MISSING_FROM,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,NO_HEADERS_MESSAGE,NO_RECEIVED,NO_RELAYS scantime=0.1,size=69,user=rambo,uid=1000,required_score=3.0,rhost=localhost,raddr=::1,rport=48336,mid=(unknown),autolearn=no autolearn_force=no
2024-10-17T19:35:14.975092-04:00 mail postfix/pickup[3370]: EDE471E2AFD: uid=1000 from=<rambo>
2024-10-17T19:35:14.975092-04:00 mail postfix/pickup[3370]: EDE471E2AFD: uid=1000 from=<rambo>
2024-10-17T19:35:14.983882-04:00 mail postfix/cleanup[3382]: EDE471E2AFD: message-id=<20241017233514.EDE471E2AFD@labexample.com>
2024-10-17T19:35:14.983882-04:00 mail postfix/cleanup[3382]: EDE471E2AFD: message-id=<20241017233514.EDE471E2AFD@labexample.com>
2024-10-17T19:35:14.985815-04:00 mail postfix/qmgr[3371]: EDE471E2AFD: from=<rambo@mail.example.com>, size=1273, nrcpt=1 (queue active)
2024-10-17T19:35:14.985815-04:00 mail postfix/qmgr[3371]: EDE471E2AFD: from=<rambo@mail.example.com>, size=1273, nrcpt=1 (queue active)
2024-10-17T19:35:14.994911-04:00 mail postfix/local[3384]: EDE471E2AFD: to=<rambo@labexample.com>, relay=local, delay=0.12, delays=0.11/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir)
2024-10-17T19:35:14.994911-04:00 mail postfix/local[3384]: EDE471E2AFD: to=<rambo@labexample.com>, relay=local, delay=0.12, delays=0.11/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir)
2024-10-17T19:35:14.995751-04:00 mail postfix/qmgr[3371]: EDE471E2AFD: removed
2024-10-17T19:35:14.995751-04:00 mail postfix/qmgr[3371]: EDE471E2AFD: removed

常见邮件客户端中设置过滤规则

1、Thunderbird
Thunderbird 是一个流行的开源邮件客户端。您可以通过以下步骤设置垃圾邮件过滤规则:
打开 Thunderbird 并选择您的邮箱账户
点击“工具”菜单,选择 “邮件过滤”
点击 “新建”,创建一个新的过滤规则

设置过滤条件:
选择 “自定义”,并在字段中输入 X-Spam-Flag
设置条件为 “等于”,并在值中输入 YES

选择执行操作:
选择 “移动到文件夹”,并选择或创建垃圾邮件文件夹
保存规则,邮件客户端将自动根据 SpamAssassin 的标记来过滤垃圾邮件


2、Outlook
在 Outlook 中,您可以通过以下步骤创建过滤规则:
打开 Outlook 并转到 “文件” > “管理规则和通知”
点击 “新建规则”,选择 “应用规则到接收的邮件”
在条件部分选择 “邮件包含特定字词”
选择 “在邮件头中”,并输入 X-Spam-Flag: YES
在操作部分选择 “将邮件移到指定文件夹”,选择或创建垃圾邮件文件夹
保存规则,之后任何被 SpamAssassin 标记的垃圾邮件都会自动移动到指定的文件夹

3、Apple Mail (macOS)
在 Apple Mail 中,您可以通过以下步骤设置垃圾邮件过滤规则:
打开 Apple Mail 并选择 “邮件” > “偏好设置”
转到 “规则” 标签页,点击 “添加规则”
为规则命名,设置条件为:
“邮件头包含 X-Spam-Flag”,并设置为 “YES”
设置操作为 “将邮件移动到垃圾邮件” 文件夹
保存规则,Apple Mail 将根据规则自动过滤垃圾邮件。


# 调整客户端垃圾邮件策略
大部分邮件客户端(如 Thunderbird、Outlook 和 Apple Mail)都有内置的垃圾邮件过滤功能。这些功能会与 SpamAssassin 产生一定的协同作用,进一步提高垃圾邮件识别率
您可以在客户端中调整这些设置,以便结合服务器端 SpamAssassin 过滤器使用

例如:
Thunderbird:启用 “垃圾邮件控制”,客户端会根据邮件头中的 SpamAssassin 标记以及自身的垃圾邮件规则共同判断
Outlook:可以调整垃圾邮件保护级别,以自动将 SpamAssassin 标记的邮件移至垃圾邮件文件夹
Apple Mail:可以结合规则和内置的垃圾邮件过滤机制,进一步增强垃圾邮件的自动检测和处理


# 定期检查垃圾邮件文件夹
即便有 SpamAssassin 和客户端规则的双重保障,偶尔也可能会有误判。因此,建议定期检查垃圾邮件文件夹,以确保没有误将正常邮件标记为垃圾邮件


posted @ 2024-10-18 08:12  Linux大魔王  阅读(39)  评论(0编辑  收藏  举报