-
-
Save gleicon/08c0927e7b7598e60891985292565b90 to your computer and use it in GitHub Desktop.
Postfix (RBL/DNSBL/BL) + Dovecot + Postgrey + Spamassassin + Clamav + Sieve + Roundcube + Postfixadmin : https://wiki.matteobasso.com/Postfix_%26_Dovecot_:_installation_procedure
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| biff = no | |
| myhostname = mail.mysite.org | |
| mydomain = mysite.org | |
| myorigin = /etc/mailname | |
| mydestination = $myhostname, localhost.$mydomain, localhost | |
| relayhost = | |
| mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 | |
| mailbox_size_limit = 0 | |
| recipient_delimiter = + | |
| inet_interfaces = all | |
| inet_protocols = ipv4 | |
| alias_maps = hash:/etc/aliases | |
| #alias_database = hash:/etc/aliases | |
| #home_mailbox = Maildir/ | |
| smtp_host_lookup = native | |
| # Do not append domain part to incomplete addresses (this is the MUA's job) | |
| append_dot_mydomain = no | |
| # Disable local transport (so that system accounts can't receive mail) | |
| local_transport = error:Local Transport Disabled | |
| compatibility_level=2 | |
| ##### BLACKLIST | |
| # Deny VRFY recipient checks | |
| disable_vrfy_command = yes | |
| # log recipient address information when rejecting a client name/address or sender address | |
| smtpd_delay_reject = yes | |
| # Require HELO | |
| smtpd_helo_required = yes | |
| # Reject email if remote hostname is not in fully-qualified domain form. Usually bots sending email don’t have FQDN names | |
| # Reject all bots sending email from computers connected via DSL/ADSL computers. They don’t have valid internet hostname. | |
| smtpd_helo_restrictions = permit_mynetworks, | |
| reject_non_fqdn_hostname, | |
| reject_invalid_hostname, | |
| permit | |
| # Limit incoming or receiving email rate to avoid spam | |
| smtpd_error_sleep_time = 1s | |
| smtpd_soft_error_limit = 10 | |
| smtpd_hard_error_limit = 20 | |
| # Header check - rejected | |
| header_checks = regexp:/etc/postfix/header_check_file | |
| smtpd_relay_restrictions = | |
| permit_mynetworks, | |
| permit_sasl_authenticated, | |
| defer_unauth_destination | |
| smtpd_recipient_restrictions = | |
| permit_mynetworks, | |
| permit_sasl_authenticated, | |
| reject_unauth_pipelining, | |
| reject_invalid_hostname, | |
| reject_non_fqdn_hostname, | |
| reject_non_fqdn_sender, | |
| reject_non_fqdn_recipient, | |
| reject_unknown_sender_domain, | |
| reject_unauth_destination, | |
| reject_unknown_recipient_domain, | |
| reject_rbl_client zen.spamhaus.org, | |
| reject_rbl_client bl.spamcop.net, | |
| reject_rbl_client cbl.abuseat.org, | |
| reject_rbl_client dnsbl.sorbs.net, | |
| reject_rbl_client psbl.surriel.com, | |
| reject_rbl_client b.barracudacentral.org, | |
| check_client_access cidr:/etc/postfix/client_checks, | |
| check_policy_service inet:127.0.0.1:10023, | |
| permit | |
| smtpd_sender_restrictions = | |
| reject_non_fqdn_sender, | |
| reject_unknown_sender_domain, | |
| permit | |
| ##### TLS configuration | |
| # Just to remember : | |
| # smtpd --> handling/routing incoming mail | |
| # smtp --> delivering mail | |
| smtpd_use_tls = yes | |
| smtp_use_tls = yes | |
| # TSL Certificate location | |
| smtpd_tls_key_file = /etc/letsencrypt/live/mail.mysite.org/privkey.pem | |
| smtpd_tls_cert_file = /etc/letsencrypt/live/mail.mysite.org/fullchain.pem | |
| smtp_tls_key_file = /etc/letsencrypt/live/mail.mysite.org/privkey.pem | |
| smtp_tls_cert_file = /etc/letsencrypt/live/mail.mysite.org/fullchain.pem | |
| # CA location | |
| # https://askubuntu.com/questions/73865/postfix-gmail-certificate-verification-failed | |
| # prevent : Untrusted TLS connection established | |
| smtp_tls_CApath = /etc/ssl/certs | |
| smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt | |
| smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt | |
| smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache | |
| smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache | |
| smtpd_tls_auth_only = yes | |
| smtpd_tls_received_header = yes | |
| smtpd_tls_session_cache_timeout = 3600s | |
| smtp_tls_note_starttls_offer = yes | |
| # Protocols | |
| smtp_tls_mandatory_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, eNULL | |
| smtpd_tls_mandatory_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, eNULL | |
| smtpd_tls_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, eNULL | |
| smtp_tls_mandatory_protocols = !SSLv2, !SSLv3 | |
| smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3 | |
| smtp_tls_protocols = !SSLv2, !SSLv3 | |
| smtpd_tls_protocols = !SSLv2, !SSLv3 | |
| # Randomizer for key creation | |
| tls_random_source = dev:/dev/urandom | |
| # Encrypt all messages to 3rd-party email server | |
| smtpd_tls_security_level = may | |
| smtp_tls_security_level = may | |
| smtpd_tls_loglevel = 1 | |
| smtp_tls_loglevel = 1 | |
| # try to use strong ciphers | |
| smtpd_tls_ciphers = high | |
| smtp_tls_ciphers = high | |
| ##### SASL | |
| smtpd_sasl_auth_enable = yes | |
| smtpd_sasl_type = dovecot | |
| smtpd_sasl_path = private/auth | |
| smtpd_sasl_authenticated_header = yes | |
| #smtp_sasl_auth_enable = yes | |
| smtp_sasl_security_options = noanonymous | |
| smtpd_sasl_local_domain = | |
| broken_sasl_auth_clients = yes | |
| ##### Virtual mailbox settings | |
| # vmail id 150 - gid 124 | |
| virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf | |
| virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf | |
| virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf | |
| virtual_mailbox_base = /var/mail/vmail | |
| virtual_minimum_uid = 150 | |
| virtual_uid_maps = static:150 | |
| virtual_gid_maps = static:124 | |
| virtual_transport = spamassassin | |
| # Spamassassin move spam to junk folder | |
| spamassassin_destination_recipient_limit = 1 | |
| # Clamav AV | |
| content_filter = scan:127.0.0.1:10026 | |
| receive_override_options = no_address_mappings |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Postfix master process configuration file. For details on the format | |
| # of the file, see the master(5) manual page (command: "man 5 master" or | |
| # on-line: http://www.postfix.org/master.5.html). | |
| # | |
| # Do not forget to execute "postfix reload" after editing this file. | |
| # | |
| # ========================================================================== | |
| # service type private unpriv chroot wakeup maxproc command + args | |
| # (yes) (yes) (no) (never) (100) | |
| # ========================================================================== | |
| smtp inet n - y - - smtpd | |
| -o content_filter=scan:127.0.0.1:10026 | |
| #smtp inet n - y - 1 postscreen | |
| #smtpd pass - - y - - smtpd | |
| #dnsblog unix - - y - 0 dnsblog | |
| #tlsproxy unix - - y - 0 tlsproxy | |
| submission inet n - y - - smtpd | |
| -o syslog_name=postfix/submission | |
| -o smtpd_tls_security_level=encrypt | |
| -o smtpd_sasl_auth_enable=yes | |
| -o smtpd_relay_restrictions=permit_sasl_authenticated,reject | |
| -o milter_macro_daemon_name=ORIGINATING | |
| -o smtpd_sasl_type=dovecot | |
| -o smtpd_sasl_path=private/auth | |
| -o smtpd_tls_wrappermode=no | |
| # -o content_filter=spamassassin | |
| #smtps inet n - y - - smtpd | |
| # -o syslog_name=postfix/smtps | |
| # -o smtpd_tls_wrappermode=yes | |
| # -o smtpd_sasl_auth_enable=yes | |
| # -o smtpd_reject_unlisted_recipient=no | |
| # -o smtpd_client_restrictions=$mua_client_restrictions | |
| # -o smtpd_helo_restrictions=$mua_helo_restrictions | |
| # -o smtpd_sender_restrictions=$mua_sender_restrictions | |
| # -o smtpd_recipient_restrictions= | |
| # -o smtpd_relay_restrictions=permit_sasl_authenticated,reject | |
| # -o milter_macro_daemon_name=ORIGINATING | |
| #628 inet n - y - - qmqpd | |
| pickup unix n - y 60 1 pickup | |
| cleanup unix n - y - 0 cleanup | |
| qmgr unix n - n 300 1 qmgr | |
| #qmgr unix n - n 300 1 oqmgr | |
| tlsmgr unix - - y 1000? 1 tlsmgr | |
| rewrite unix - - y - - trivial-rewrite | |
| bounce unix - - y - 0 bounce | |
| defer unix - - y - 0 bounce | |
| trace unix - - y - 0 bounce | |
| verify unix - - y - 1 verify | |
| flush unix n - y 1000? 0 flush | |
| proxymap unix - - n - - proxymap | |
| proxywrite unix - - n - 1 proxymap | |
| smtp unix - - y - - smtp | |
| relay unix - - y - - smtp | |
| # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 | |
| showq unix n - y - - showq | |
| error unix - - y - - error | |
| retry unix - - y - - error | |
| discard unix - - y - - discard | |
| local unix - n n - - local | |
| virtual unix - n n - - virtual | |
| lmtp unix - - y - - lmtp | |
| anvil unix - - y - 1 anvil | |
| scache unix - - y - 1 scache | |
| # | |
| # ==================================================================== | |
| # Interfaces to non-Postfix software. Be sure to examine the manual | |
| # pages of the non-Postfix software to find out what options it wants. | |
| # | |
| # Many of the following services use the Postfix pipe(8) delivery | |
| # agent. See the pipe(8) man page for information about ${recipient} | |
| # and other message envelope options. | |
| # ==================================================================== | |
| # | |
| # maildrop. See the Postfix MAILDROP_README file for details. | |
| # Also specify in main.cf: maildrop_destination_recipient_limit=1 | |
| # | |
| maildrop unix - n n - - pipe | |
| flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient} | |
| # | |
| # ==================================================================== | |
| # | |
| # Recent Cyrus versions can use the existing "lmtp" master.cf entry. | |
| # | |
| # Specify in cyrus.conf: | |
| # lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 | |
| # | |
| # Specify in main.cf one or more of the following: | |
| # mailbox_transport = lmtp:inet:localhost | |
| # virtual_transport = lmtp:inet:localhost | |
| # | |
| # ==================================================================== | |
| # | |
| # Cyrus 2.1.5 (Amos Gouaux) | |
| # Also specify in main.cf: cyrus_destination_recipient_limit=1 | |
| # | |
| #cyrus unix - n n - - pipe | |
| # user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user} | |
| # | |
| # ==================================================================== | |
| # Old example of delivery via Cyrus. | |
| # | |
| #old-cyrus unix - n n - - pipe | |
| # flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user} | |
| # | |
| # ==================================================================== | |
| # | |
| # See the Postfix UUCP_README file for configuration details. | |
| # | |
| uucp unix - n n - - pipe | |
| flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) | |
| # | |
| # Other external delivery methods. | |
| # | |
| ifmail unix - n n - - pipe | |
| flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) | |
| bsmtp unix - n n - - pipe | |
| flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient | |
| scalemail-backend unix - n n - 2 pipe | |
| flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} | |
| mailman unix - n n - - pipe | |
| flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py | |
| ${nexthop} ${user} | |
| # Antivirus | |
| scan unix - - n - 16 smtp | |
| -o smtp_send_xforward_command=yes | |
| # For injecting mail back into postfix from the filter | |
| 127.0.0.1:10025 inet n - n - 16 smtpd | |
| -o content_filter= | |
| -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks | |
| -o smtpd_helo_restrictions= | |
| -o smtpd_client_restrictions= | |
| -o smtpd_sender_restrictions= | |
| -o smtpd_recipient_restrictions=permit_mynetworks,reject | |
| -o mynetworks_style=host | |
| -o smtpd_authorized_xforward_hosts=127.0.0.0/8 | |
| # Spamassassin | |
| spamassassin unix - n n - - pipe | |
| flags=DROhu user=vmail:vmail argv=/usr/bin/spamc -f -e /usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf | |
| # Pigeonhole version 0.4.13 (7b14904) | |
| # OS: Linux 4.4.0-101-generic x86_64 Ubuntu 16.04.3 LTS ext4 | |
| auth_mechanisms = plain login | |
| first_valid_uid = 150 | |
| last_valid_uid = 150 | |
| first_valid_gid = 124 | |
| last_valid_gid = 124 | |
| postmaster_address = postmaster@mysite.org | |
| mail_location = maildir:/var/mail/vmail/%d/%n | |
| # https://wiki2.dovecot.org/VirtualUsers/Home | |
| # prevent lda(foo): Error: User foo doesn't have home dir set, disabling duplicate database | |
| mail_home = /var/mail/vmail/%d/%n | |
| mail_privileged_group = vmail | |
| namespace { | |
| inbox = yes | |
| mailbox Archive { | |
| auto = subscribe | |
| special_use = \Archive | |
| } | |
| mailbox Drafts { | |
| auto = subscribe | |
| special_use = \Drafts | |
| } | |
| mailbox Junk { | |
| auto = subscribe | |
| special_use = \Junk | |
| } | |
| mailbox Sent { | |
| auto = subscribe | |
| special_use = \Sent | |
| } | |
| mailbox Trash { | |
| auto = subscribe | |
| special_use = \Trash | |
| } | |
| } | |
| passdb { | |
| args = /etc/dovecot/dovecot-mysql.conf | |
| driver = sql | |
| } | |
| passdb { | |
| driver = pam | |
| } | |
| plugin { | |
| sieve = ~/.dovecot.sieve | |
| sieve_dir = ~/sieve | |
| sieve_after = /etc/dovecot/sieve/default.sieve | |
| } | |
| protocols = " imap lmtp pop3 " | |
| service auth { | |
| unix_listener /var/spool/postfix/private/auth { | |
| group = postfix | |
| mode = 0666 | |
| user = postfix | |
| } | |
| } | |
| service lmtp { | |
| unix_listener /var/spool/postfix/private/lmtp { | |
| mode = 0600 | |
| user = postfix | |
| group = postfix | |
| } | |
| } | |
| ssl_ca = </etc/letsencrypt/live/mail.mysite.org/cert.pem | |
| ssl_cert = </etc/letsencrypt/live/mail.mysite.org/fullchain.pem | |
| ssl_key = </etc/letsencrypt/live/mail.mysite.org/privkey.pem | |
| userdb { | |
| args = /etc/dovecot/dovecot-mysql.conf | |
| driver = sql | |
| } | |
| userdb { | |
| driver = passwd | |
| } | |
| protocol lmtp { | |
| mail_plugins = $mail_plugins sieve | |
| postmaster_address = postmaster@mysite.org | |
| } | |
| protocol lda { | |
| mail_plugins = $mail_plugins sieve | |
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| /^Subject: Virus Detected by Network Associates, Inc\. Webshield/ REJECT Spam detected | |
| /^Subject: ---- Virus Detected ----$/ REJECT Spam detected | |
| /^Subject: Virus detected$/ REJECT Spam detected | |
| /^Subject: Virus Alert$/ REJECT Spam detected | |
| /^Subject: InterScan NT Alert$/ REJECT Spam detected | |
| /^Subject: Virus found in the message$/ REJECT Spam detected | |
| /^Subject: Message quarantined$/ REJECT Spam detected | |
| /^Subject: VIRUS ALERT!/ REJECT Spam detected | |
| /^Subject: Virus found in e-mail \(/ REJECT Spam detected | |
| /^Subject: MDaemon Warning - Virus Found/ REJECT Spam detected | |
| /^Subject: Warning: E-mail viruses detected$/ REJECT Spam detected | |
| /^Subject: ScanMail Message: To Sender virus found/ REJECT Spam detected | |
| /^Subject: Norton Anti ?Virus detected/ REJECT Spam detected | |
| /^Subject: VIRUS .*IN YOUR MAIL$/ REJECT Spam detected | |
| /^Subject: Antigen found / REJECT Spam detected | |
| /^Subject: Filter incident$/ REJECT Spam detected | |
| /^Subject: Vírus figyelmeztetés! Virus warning!$/ REJECT Spam detected | |
| /^Subject: Symantec AV?F detect/ REJECT Spam detected | |
| /^Subject: ?Returned due to virus/ REJECT Spam detected | |
| /^Subject: Anti-Virus Notification/ REJECT Spam detected | |
| /^Subject: BANNED .* IN MAIL FROM YOU/ REJECT Spam detected | |
| /^Subject: File blocked - ScanMail for Lotus/ REJECT Spam detected | |
| /^Subject: NAV detected a virus/ REJECT Spam detected | |
| /^Subject: VIRUS .+ IN MAIL FROM YOU/ REJECT Spam detected | |
| /^Subject: Virus Notification:/ REJECT Spam detected | |
| /^Subject: Virus found in a message you sent/ REJECT Spam detected | |
| /^Subject: Virus found in sent message/ REJECT Spam detected | |
| /^Subject: VIRUS EN SU CORREO/ REJECT Spam detected | |
| /^Subject: Warning: antivirus system report$/ REJECT Spam detected | |
| /^Subject: MDaemon Notification -- Attachment Removed$/ REJECT Spam detected | |
| /^Subject: Information - Antivirus$/ REJECT Spam detected | |
| /^Subject: Symantec AntiVirus detected a violation/ REJECT Spam detected | |
| /^Subject: WARNING: YOU WERE SENT A VIRUS/ REJECT Spam detected | |
| /^Subject: SAV detected a violation in a document/ REJECT Spam detected | |
| /^Subject: MailMarshal has detected a suspect attachment/ REJECT Spam detected | |
| /^Subject: A virus was detected in your m/ REJECT Spam detected | |
| /^Subject: Recipient Virus-alert/ REJECT Spam detected | |
| /^Subject: Virus Found in message/ REJECT Spam detected | |
| /^Subject: E-?mail viruses detected/ REJECT Spam detected | |
| /^Subject: Undelivered mail: VIRUS FOUND/ REJECT Spam detected | |
| /^Subject: Quarantined Mail: virus from/ REJECT Spam detected | |
| /^Subject: Attenzione Virus/ REJECT Spam detected | |
| /^Subject: \[MailServer Notification\]To Sender virus found/ REJECT Spam detected | |
| /^Subject: virus in verschickter Nachricht gefunden/ REJECT Spam detected | |
| /^Subject: MailMarshal has detected a Virus in your message/ REJECT Spam detected | |
| /^Subject: Virus encontrado en el mensaje enviado/ REJECT Spam detected | |
| /^Subject: Security Alert - ScanMail for Lotus Notes/ REJECT Spam detected | |
| /^Subject: Virus Infection Alert/ REJECT Spam detected | |
| /^Subject: Warning - Virus Detected:/ REJECT Spam detected | |
| /^Subject: Skynet Mail Protection scan results/ REJECT Spam detected | |
| /^X-BLTSYMAVREINSERT/ REJECT Spam detected | |
| /^X-Virus-Scan-Result: Repaired/ REJECT Spam detected | |
| /^X-.*-MailScanner: Found to be infected/ REJECT Spam detected | |
| /^X-Scanned: Symantec Antivirus Scan - Virus found/ REJECT Spam detected | |
| /^X-Sender: NetMail AntiVirus Agent/ REJECT Spam detected | |
| /^X-Auto-Generated: Sophos antivirus plugin/ REJECT Spam detected | |
| /^Subject: Virusveszely! Virus warning!/ REJECT Spam detected | |
| /^Subject: Virus in mail from you\./ REJECT Spam detected | |
| /^Subject: Virus infection notice/ REJECT Spam detected | |
| /^Subject: Possible virus found in message you sent/ REJECT Spam detected | |
| /^Subject: AntiVir ALERT/ REJECT Spam detected | |
| /^Subject: Centrale Anti-Virus melding/ REJECT Spam detected | |
| /^Subject: Vexira ALERT/ REJECT Spam detected | |
| /^X-ELTE-VirusStatus: was_infected/ REJECT Spam detected | |
| /^Subject: You sent potentially unsafe content/ REJECT Spam detected | |
| /^Subject: Hov, du har sendt Jubii en virus !!!$/ REJECT Spam detected | |
| /^Subject: \[message from .*virus detect system\]$/ REJECT Spam detected | |
| /^Subject: Net Integrator Virus Alert$/ REJECT Spam detected | |
| /^Subject: AntiVirus Alert!$/ REJECT Spam detected | |
| /^Subject: \{ALERTA DE VIRUS\}/ REJECT Spam detected | |
| /^Subject: Virus in una mail per lei/ REJECT Spam detected | |
| /^Subject: .*AntiVirus scan results/ REJECT Spam detected | |
| /^X-Mailer: ravmd\// REJECT Spam detected | |
| /^Subject:.*ALERTE \- Vous avez envoye un mail avec virus/ REJECT Spam detected | |
| /^Subject:.*ALERTE\: un virus a / REJECT Spam detected | |
| /^Subject:.*ALERT\! Virus found in your mail/ REJECT Spam detected | |
| /^Subject:.*Anti-Virus Notification/ REJECT Spam detected | |
| /^Subject:.*Antigen Notification/ REJECT Spam detected | |
| /^Subject:.*Antigen found VIRUS/ REJECT Spam detected | |
| /^Subject:.*Antivirus stopped your message/ REJECT Spam detected | |
| /^Subject:.*Email Quarantined Due to Virus/ REJECT Spam detected | |
| /^Subject:.*Failed to clean virus file/ REJECT Spam detected | |
| /^Subject:.*Inflex scan report \[\d+\]/ REJECT Spam detected | |
| /^Subject:.*InterScan NT Alert/ REJECT Spam detected | |
| /^Subject:.*MMS Notification/ REJECT Spam detected | |
| /^Subject:.*MailSure Virus Alert/ REJECT Spam detected | |
| /^Subject:.*Ochrona antywirusowa/ REJECT Spam detected | |
| /^Subject:.*\! Virus Notify \!/ REJECT Spam detected | |
| /^Subject:.*SAV detected a violation in a / REJECT Spam detected | |
| /^Subject:.*VIRUS NO SEU EMAIL/ REJECT Spam detected | |
| /^Subject:.*Virus Check Alert/ REJECT Spam detected | |
| /^Subject:.*Virus Notification from Redstone/ REJECT Spam detected | |
| /^Subject:.*Virus Quarantine Notification/ REJECT Spam detected | |
| /^Subject:.*Virus in Ihrer Nachricht/ REJECT Spam detected | |
| /^Subject:.*Votre message contient un virus/ REJECT Spam detected | |
| /^Subject:.*Warning\: E-mail viruses detected/ REJECT Spam detected | |
| /^Subject:.*WorldSecure Server notification/ REJECT Spam detected | |
| /^Subject:.*\[SmartFilter\] Virus Alert / REJECT Spam detected | |
| /^Subject:.*\[Virus detected\]/ REJECT Spam detected | |
| /^Subject:.*virus trouve dans le message envoye/ REJECT Spam detected | |
| /^Subject:.*virus trovato in un messaggio inviato/ REJECT Spam detected | |
| /^Subject: HBOS plc Automated Email Administrator/ REJECT Spam detected | |
| /^Subject: Virus found:/ REJECT Spam detected | |
| /^Subject: Your mail server sent us a virus/ REJECT Spam detected | |
| /^Subject: This is an alert from eSafe$/ REJECT Spam detected | |
| /^Subject: Virus encontrado/ REJECT Spam detected | |
| /^Subject: Notification du serveur antivirus/ REJECT Spam detected | |
| /^Subject: NAV ha rilevato un virus in un documento inviato$/ REJECT Spam detected | |
| /^Subject: Network Associates Webshield - e-mail Content Alert$/ REJECT Spam detected | |
| /^Subject: Symantec AntiVirus\/Filtering for Domino detected a virus/ REJECT Spam detected | |
| /^Subject: Eclipse Internet VIRUSshield detected VIRUS/ REJECT Spam detected | |
| /^Subject: VIRUS MESSAGE$/ REJECT Spam detected | |
| /^Subject: Internet Mail Failure - Virus Alert$/ REJECT Spam detected | |
| /^Subject: FOUND VIRUS IN YOUR MAIL TO:/ REJECT Spam detected | |
| /^Subject: ALERT - Virus .+ found/ REJECT Spam detected | |
| /^Subject: Suppresion du Virus/ REJECT Spam detected | |
| /^Subject: Tipo de arquivo anexo nao permitido!/ REJECT Spam detected | |
| /^Subject: \[.+: Virus detected\]$/ REJECT Spam detected | |
| /^Subject: RAV[0-9]+ Antivirus notification/ REJECT Spam detected | |
| /^Subject: ATTENZIONE: Ricevuto VIRUS da/ REJECT Spam detected | |
| /^Subject: Warning: antivirus system report/ REJECT Spam detected | |
| /^Subject: WARNING: We blocked a virus that was sent to you/ REJECT Spam detected | |
| /^Subject: ScanMail Message: To Sender, virus found and action taken/ REJECT Spam detected | |
| /^Subject: Warning: A possible virus has been detected in one of your/ REJECT Spam detected | |
| /^Subject: Symantec har fundet en virus i den mail du har sendt/ REJECT Spam detected | |
| /^Subject: Rejected Mail: attachment from/ REJECT Spam detected | |
| /^Subject: Returned mail: Possible Virus Infection/ REJECT Spam detected | |
| /^Subject: VIRUS \(.*\) FROM <.*>/ REJECT Spam detected | |
| /^Subject: Symantec Mail Security detected/ REJECT Spam detected | |
| /^Subject: Attachments not Delivered by MailScan/ REJECT Spam detected | |
| /^Subject: .+action taken by attachment blocking feature/ REJECT Spam detected | |
| /^Subject: You sent infected message/ REJECT Spam detected | |
| /^Subject: .+e-mail Content Alert$/ REJECT Spam detected | |
| /^Subject: VIRUSALARM/ REJECT Spam detected | |
| /^Subject: Virusdetection:/ REJECT Spam detected | |
| /^Subject: Recipient Virus-alert/ REJECT Spam detected | |
| /^Subject: Norton AntiVirus quarantined an attachment in a message/ REJECT Spam detected | |
| /^Subject: MailMonitor for Exchange has processed a suspicious mail/ REJECT Spam detected | |
| /^Subject: WARNING: YOU MAY HAVE A VIRUS/ REJECT Spam detected | |
| /^X-Tnz-Problem-Type: 40/ REJECT Spam detected | |
| /^Subject: Discarded Mail: virus from/ REJECT Spam detected | |
| /^Subject: SafeInternetEmail Notification/ REJECT Spam detected | |
| /^Subject: Subject: CMC MAIL GATEWAY ALERT/ REJECT Spam detected | |
| /^Subject: Warning: Possible Virus Infection/ REJECT Spam detected | |
| /^Subject: .*\/ VIRUS SENT FROM YOUR ADDRESS/ REJECT Spam detected | |
| /^Subject: virus encontrado/ REJECT Spam detected | |
| /^Subject: .*virus detectado/ REJECT Spam detected | |
| /^Subject: virus interceptado/ REJECT Spam detected | |
| /^Subject: Virus en un correo electr/ REJECT Spam detected | |
| /^Subject: virus de e-mail detectado/ REJECT Spam detected | |
| /^Subject: virus en su correo/ REJECT Spam detected | |
| /^Subject: incidencia de virus/ REJECT Spam detected | |
| /^Subject: violaci[oó]n de contenido/ REJECT Spam detected | |
| /^Subject: contenido no permitido/ REJECT Spam detected | |
| /^Subject: alerta del antivirus/ REJECT Spam detected | |
| /^Subject: VIRUS .* EN CORREO PRESUMIBLEMENTE SUYO/ REJECT Spam detected | |
| /^Subject: detectado un virus en su mensaje/ REJECT Spam detected | |
| /^Subject: fichero adjunto no permitido encontrado/ REJECT Spam detected | |
| /^Subject: Antigen encontr[oó] el fichero/ REJECT Spam detected | |
| /^Subject: Quarantined Mail: attachment from/ REJECT Spam detected | |
| /^Subject: GWAVA Sender Notification (Virus infection)/ REJECT Spam detected | |
| /^Subject: ?BitDefender found an infected/ REJECT Spam detected | |
| /^Subject: \[Virus\] Policy Violation/ REJECT Spam detected | |
| /^Subject: Non delivery report: 5.*(Virus infection)/ REJECT Spam detected | |
| /^(Received|Message-Id|X-(Mailer|Sender)):.*\b(AutoMail|E-Broadcaster|Emailer Platinum|Thunder Server|eMarksman|Extractor|e-Merge|from stealth[^.]|Global Messenger|GroupMaster|Mailcast|MailKing|Match10|MassE-Mail|massmail\.pl|News Breaker|Powermailer|Quick Shot|Ready Aim | |
| Fire|WindoZ|WorldMerge|Yourdora|Lite)\b/ REJECT No mass mailers allowed. You are probably sending spam | |
| /^X-Mailer:.*\b(Aristotle|Avalanche|Blaster|Bomber|DejaVu|eMerge|Extractor|UltraMail|Sonic|Floodgate|GeoList|Mach10|MegaPro|Aureate|MultiMailer|Bluecom|Achi-Kochi Mail|Direct Email|Andrew's SuperCool Blastoise|MailerGear|Advanced Mass Sender|SpireMail|MailWorkZ|UltimDBMa | |
| il|Mabry|Lite)\b/ REJECT No mass mailers allowed. You are probably sending spam. | |
| /^(To|From|Cc|Reply-To):.*@optonline/ REJECT Sorry, your message is probably spam | |
| /^Subject: =?EUC-KR?/ REJECT Korean encoding not allowed by this server | |
| /^Subject: =?Windows-1251?/ REJECT Russian encoding not allowed by this server | |
| /^Subject: =\?KOI8-R\?/ REJECT Russian encoding not allowed by this server | |
| /^Subject: ADV:/ REJECT Advertisements not accepted by this server | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment