/01 main.cf
Last active Feb 12, 2020
Postfix (RBL/DNSBL/BL) + Dovecot + Postgrey + Spamassassin + Clamav + Sieve + Roundcube + Postfixadmin : https://wiki.matteobasso.com/Postfix_%26_Dovecot_:_installation_procedure
| biff = no | |
| myhostname = mail.mysite.org | |
| mydomain = mysite.org | |
| myorigin = /etc/mailname | |
| mydestination = $myhostname, localhost.$mydomain, localhost | |
| relayhost = | |
| mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 | |
| mailbox_size_limit = 0 | |
| recipient_delimiter = + | |
| inet_interfaces = all | |
| inet_protocols = ipv4 | |
| alias_maps = hash:/etc/aliases | |
| #alias_database = hash:/etc/aliases | |
| #home_mailbox = Maildir/ | |
| smtp_host_lookup = native | |
| # Do not append domain part to incomplete addresses (this is the MUA's job) | |
| append_dot_mydomain = no | |
| # Disable local transport (so that system accounts can't receive mail) | |
| local_transport = error:Local Transport Disabled | |
| compatibility_level=2 | |
| ##### BLACKLIST | |
| # Deny VRFY recipient checks | |
| disable_vrfy_command = yes | |
| # log recipient address information when rejecting a client name/address or sender address | |
| smtpd_delay_reject = yes | |
| # Require HELO | |
| smtpd_helo_required = yes | |
| # Reject email if remote hostname is not in fully-qualified domain form. Usually bots sending email don’t have FQDN names | |
| # Reject all bots sending email from computers connected via DSL/ADSL computers. They don’t have valid internet hostname. | |
| smtpd_helo_restrictions = permit_mynetworks, | |
| reject_non_fqdn_hostname, | |
| reject_invalid_hostname, | |
| permit | |
| # Limit incoming or receiving email rate to avoid spam | |
| smtpd_error_sleep_time = 1s | |
| smtpd_soft_error_limit = 10 | |
| smtpd_hard_error_limit = 20 | |
| # Header check - rejected | |
| header_checks = regexp:/etc/postfix/header_check_file | |
| smtpd_relay_restrictions = | |
| permit_mynetworks, | |
| permit_sasl_authenticated, | |
| defer_unauth_destination | |
| smtpd_recipient_restrictions = | |
| permit_mynetworks, | |
| permit_sasl_authenticated, | |
| reject_unauth_pipelining, | |
| reject_invalid_hostname, | |
| reject_non_fqdn_hostname, | |
| reject_non_fqdn_sender, | |
| reject_non_fqdn_recipient, | |
| reject_unknown_sender_domain, | |
| reject_unauth_destination, | |
| reject_unknown_recipient_domain, | |
| reject_rbl_client zen.spamhaus.org, | |
| reject_rbl_client bl.spamcop.net, | |
| reject_rbl_client cbl.abuseat.org, | |
| reject_rbl_client dnsbl.sorbs.net, | |
| reject_rbl_client psbl.surriel.com, | |
| reject_rbl_client b.barracudacentral.org, | |
| check_client_access cidr:/etc/postfix/client_checks, | |
| check_policy_service inet:127.0.0.1:10023, | |
| permit | |
| smtpd_sender_restrictions = | |
| reject_non_fqdn_sender, | |
| reject_unknown_sender_domain, | |
| permit | |
| ##### TLS configuration | |
| # Just to remember : | |
| # smtpd --> handling/routing incoming mail | |
| # smtp --> delivering mail | |
| smtpd_use_tls = yes | |
| smtp_use_tls = yes | |
| # TSL Certificate location | |
| smtpd_tls_key_file = /etc/letsencrypt/live/mail.mysite.org/privkey.pem | |
| smtpd_tls_cert_file = /etc/letsencrypt/live/mail.mysite.org/fullchain.pem | |
| smtp_tls_key_file = /etc/letsencrypt/live/mail.mysite.org/privkey.pem | |
| smtp_tls_cert_file = /etc/letsencrypt/live/mail.mysite.org/fullchain.pem | |
| # CA location | |
| # https://askubuntu.com/questions/73865/postfix-gmail-certificate-verification-failed | |
| # prevent : Untrusted TLS connection established | |
| smtp_tls_CApath = /etc/ssl/certs | |
| smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt | |
| smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt | |
| smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache | |
| smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache | |
| smtpd_tls_auth_only = yes | |
| smtpd_tls_received_header = yes | |
| smtpd_tls_session_cache_timeout = 3600s | |
| smtp_tls_note_starttls_offer = yes | |
| # Protocols | |
| smtp_tls_mandatory_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, eNULL | |
| smtpd_tls_mandatory_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, eNULL | |
| smtpd_tls_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, eNULL | |
| smtp_tls_mandatory_protocols = !SSLv2, !SSLv3 | |
| smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3 | |
| smtp_tls_protocols = !SSLv2, !SSLv3 | |
| smtpd_tls_protocols = !SSLv2, !SSLv3 | |
| # Randomizer for key creation | |
| tls_random_source = dev:/dev/urandom | |
| # Encrypt all messages to 3rd-party email server | |
| smtpd_tls_security_level = may | |
| smtp_tls_security_level = may | |
| smtpd_tls_loglevel = 1 | |
| smtp_tls_loglevel = 1 | |
| # try to use strong ciphers | |
| smtpd_tls_ciphers = high | |
| smtp_tls_ciphers = high | |
| ##### SASL | |
| smtpd_sasl_auth_enable = yes | |
| smtpd_sasl_type = dovecot | |
| smtpd_sasl_path = private/auth | |
| smtpd_sasl_authenticated_header = yes | |
| #smtp_sasl_auth_enable = yes | |
| smtp_sasl_security_options = noanonymous | |
| smtpd_sasl_local_domain = | |
| broken_sasl_auth_clients = yes | |
| ##### Virtual mailbox settings | |
| # vmail id 150 - gid 124 | |
| virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf | |
| virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf | |
| virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf | |
| virtual_mailbox_base = /var/mail/vmail | |
| virtual_minimum_uid = 150 | |
| virtual_uid_maps = static:150 | |
| virtual_gid_maps = static:124 | |
| virtual_transport = spamassassin | |
| # Spamassassin move spam to junk folder | |
| spamassassin_destination_recipient_limit = 1 | |
| # Clamav AV | |
| content_filter = scan:127.0.0.1:10026 | |
| receive_override_options = no_address_mappings |
| # Postfix master process configuration file. For details on the format | |
| # of the file, see the master(5) manual page (command: "man 5 master" or | |
| # on-line: http://www.postfix.org/master.5.html). | |
| # | |
| # Do not forget to execute "postfix reload" after editing this file. | |
| # | |
| # ========================================================================== | |
| # service type private unpriv chroot wakeup maxproc command + args | |
| # (yes) (yes) (no) (never) (100) | |
| # ========================================================================== | |
| smtp inet n - y - - smtpd | |
| -o content_filter=scan:127.0.0.1:10026 | |
| #smtp inet n - y - 1 postscreen | |
| #smtpd pass - - y - - smtpd | |
| #dnsblog unix - - y - 0 dnsblog | |
| #tlsproxy unix - - y - 0 tlsproxy | |
| submission inet n - y - - smtpd | |
| -o syslog_name=postfix/submission | |
| -o smtpd_tls_security_level=encrypt | |
| -o smtpd_sasl_auth_enable=yes | |
| -o smtpd_relay_restrictions=permit_sasl_authenticated,reject | |
| -o milter_macro_daemon_name=ORIGINATING | |
| -o smtpd_sasl_type=dovecot | |
| -o smtpd_sasl_path=private/auth | |
| -o smtpd_tls_wrappermode=no | |
| # -o content_filter=spamassassin | |
| #smtps inet n - y - - smtpd | |
| # -o syslog_name=postfix/smtps | |
| # -o smtpd_tls_wrappermode=yes | |
| # -o smtpd_sasl_auth_enable=yes | |
| # -o smtpd_reject_unlisted_recipient=no | |
| # -o smtpd_client_restrictions=$mua_client_restrictions | |
| # -o smtpd_helo_restrictions=$mua_helo_restrictions | |
| # -o smtpd_sender_restrictions=$mua_sender_restrictions | |
| # -o smtpd_recipient_restrictions= | |
| # -o smtpd_relay_restrictions=permit_sasl_authenticated,reject | |
| # -o milter_macro_daemon_name=ORIGINATING | |
| #628 inet n - y - - qmqpd | |
| pickup unix n - y 60 1 pickup | |
| cleanup unix n - y - 0 cleanup | |
| qmgr unix n - n 300 1 qmgr | |
| #qmgr unix n - n 300 1 oqmgr | |
| tlsmgr unix - - y 1000? 1 tlsmgr | |
| rewrite unix - - y - - trivial-rewrite | |
| bounce unix - - y - 0 bounce | |
| defer unix - - y - 0 bounce | |
| trace unix - - y - 0 bounce | |
| verify unix - - y - 1 verify | |
| flush unix n - y 1000? 0 flush | |
| proxymap unix - - n - - proxymap | |
| proxywrite unix - - n - 1 proxymap | |
| smtp unix - - y - - smtp | |
| relay unix - - y - - smtp | |
| # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 | |
| showq unix n - y - - showq | |
| error unix - - y - - error | |
| retry unix - - y - - error | |
| discard unix - - y - - discard | |
| local unix - n n - - local | |
| virtual unix - n n - - virtual | |
| lmtp unix - - y - - lmtp | |
| anvil unix - - y - 1 anvil | |
| scache unix - - y - 1 scache | |
| # | |
| # ==================================================================== | |
| # Interfaces to non-Postfix software. Be sure to examine the manual | |
| # pages of the non-Postfix software to find out what options it wants. | |
| # | |
| # Many of the following services use the Postfix pipe(8) delivery | |
| # agent. See the pipe(8) man page for information about ${recipient} | |
| # and other message envelope options. | |
| # ==================================================================== | |
| # | |
| # maildrop. See the Postfix MAILDROP_README file for details. | |
| # Also specify in main.cf: maildrop_destination_recipient_limit=1 | |
| # | |
| maildrop unix - n n - - pipe | |
| flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient} | |
| # | |
| # ==================================================================== | |
| # | |
| # Recent Cyrus versions can use the existing "lmtp" master.cf entry. | |
| # | |
| # Specify in cyrus.conf: | |
| # lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 | |
| # | |
| # Specify in main.cf one or more of the following: | |
| # mailbox_transport = lmtp:inet:localhost | |
| # virtual_transport = lmtp:inet:localhost | |
| # | |
| # ==================================================================== | |
| # | |
| # Cyrus 2.1.5 (Amos Gouaux) | |
| # Also specify in main.cf: cyrus_destination_recipient_limit=1 | |
| # | |
| #cyrus unix - n n - - pipe | |
| # user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user} | |
| # | |
| # ==================================================================== | |
| # Old example of delivery via Cyrus. | |
| # | |
| #old-cyrus unix - n n - - pipe | |
| # flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user} | |
| # | |
| # ==================================================================== | |
| # | |
| # See the Postfix UUCP_README file for configuration details. | |
| # | |
| uucp unix - n n - - pipe | |
| flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) | |
| # | |
| # Other external delivery methods. | |
| # | |
| ifmail unix - n n - - pipe | |
| flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) | |
| bsmtp unix - n n - - pipe | |
| flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient | |
| scalemail-backend unix - n n - 2 pipe | |
| flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} | |
| mailman unix - n n - - pipe | |
| flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py | |
| ${nexthop} ${user} | |
| # Antivirus | |
| scan unix - - n - 16 smtp | |
| -o smtp_send_xforward_command=yes | |
| # For injecting mail back into postfix from the filter | |
| 127.0.0.1:10025 inet n - n - 16 smtpd | |
| -o content_filter= | |
| -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks | |
| -o smtpd_helo_restrictions= | |
| -o smtpd_client_restrictions= | |
| -o smtpd_sender_restrictions= | |
| -o smtpd_recipient_restrictions=permit_mynetworks,reject | |
| -o mynetworks_style=host | |
| -o smtpd_authorized_xforward_hosts=127.0.0.0/8 | |
| # Spamassassin | |
| spamassassin unix - n n - - pipe | |
| flags=DROhu user=vmail:vmail argv=/usr/bin/spamc -f -e /usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} |
| # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf | |
| # Pigeonhole version 0.4.13 (7b14904) | |
| # OS: Linux 4.4.0-101-generic x86_64 Ubuntu 16.04.3 LTS ext4 | |
| auth_mechanisms = plain login | |
| first_valid_uid = 150 | |
| last_valid_uid = 150 | |
| first_valid_gid = 124 | |
| last_valid_gid = 124 | |
| postmaster_address = postmaster@mysite.org | |
| mail_location = maildir:/var/mail/vmail/%d/%n | |
| # https://wiki2.dovecot.org/VirtualUsers/Home | |
| # prevent lda(foo): Error: User foo doesn't have home dir set, disabling duplicate database | |
| mail_home = /var/mail/vmail/%d/%n | |
| mail_privileged_group = vmail | |
| namespace { | |
| inbox = yes | |
| mailbox Archive { | |
| auto = subscribe | |
| special_use = \Archive | |
| } | |
| mailbox Drafts { | |
| auto = subscribe | |
| special_use = \Drafts | |
| } | |
| mailbox Junk { | |
| auto = subscribe | |
| special_use = \Junk | |
| } | |
| mailbox Sent { | |
| auto = subscribe | |
| special_use = \Sent | |
| } | |
| mailbox Trash { | |
| auto = subscribe | |
| special_use = \Trash | |
| } | |
| } | |
| passdb { | |
| args = /etc/dovecot/dovecot-mysql.conf | |
| driver = sql | |
| } | |
| passdb { | |
| driver = pam | |
| } | |
| plugin { | |
| sieve = ~/.dovecot.sieve | |
| sieve_dir = ~/sieve | |
| sieve_after = /etc/dovecot/sieve/default.sieve | |
| } | |
| protocols = " imap lmtp pop3 " | |
| service auth { | |
| unix_listener /var/spool/postfix/private/auth { | |
| group = postfix | |
| mode = 0666 | |
| user = postfix | |
| } | |
| } | |
| service lmtp { | |
| unix_listener /var/spool/postfix/private/lmtp { | |
| mode = 0600 | |
| user = postfix | |
| group = postfix | |
| } | |
| } | |
| ssl_ca = </etc/letsencrypt/live/mail.mysite.org/cert.pem | |
| ssl_cert = </etc/letsencrypt/live/mail.mysite.org/fullchain.pem | |
| ssl_key = </etc/letsencrypt/live/mail.mysite.org/privkey.pem | |
| userdb { | |
| args = /etc/dovecot/dovecot-mysql.conf | |
| driver = sql | |
| } | |
| userdb { | |
| driver = passwd | |
| } | |
| protocol lmtp { | |
| mail_plugins = $mail_plugins sieve | |
| postmaster_address = postmaster@mysite.org | |
| } | |
| protocol lda { | |
| mail_plugins = $mail_plugins sieve | |
| } |
| /^Subject: Virus Detected by Network Associates, Inc\. Webshield/ REJECT Spam detected | |
| /^Subject: ---- Virus Detected ----$/ REJECT Spam detected | |
| /^Subject: Virus detected$/ REJECT Spam detected | |
| /^Subject: Virus Alert$/ REJECT Spam detected | |
| /^Subject: InterScan NT Alert$/ REJECT Spam detected | |
| /^Subject: Virus found in the message$/ REJECT Spam detected | |
| /^Subject: Message quarantined$/ REJECT Spam detected | |
| /^Subject: VIRUS ALERT!/ REJECT Spam detected | |
| /^Subject: Virus found in e-mail \(/ REJECT Spam detected | |
| /^Subject: MDaemon Warning - Virus Found/ REJECT Spam detected | |
| /^Subject: Warning: E-mail viruses detected$/ REJECT Spam detected | |
| /^Subject: ScanMail Message: To Sender virus found/ REJECT Spam detected | |
| /^Subject: Norton Anti ?Virus detected/ REJECT Spam detected | |
| /^Subject: VIRUS .*IN YOUR MAIL$/ REJECT Spam detected | |
| /^Subject: Antigen found / REJECT Spam detected | |
| /^Subject: Filter incident$/ REJECT Spam detected | |
| /^Subject: Vírus figyelmeztetés! Virus warning!$/ REJECT Spam detected | |
| /^Subject: Symantec AV?F detect/ REJECT Spam detected | |
| /^Subject: ?Returned due to virus/ REJECT Spam detected | |
| /^Subject: Anti-Virus Notification/ REJECT Spam detected | |
| /^Subject: BANNED .* IN MAIL FROM YOU/ REJECT Spam detected | |
| /^Subject: File blocked - ScanMail for Lotus/ REJECT Spam detected | |
| /^Subject: NAV detected a virus/ REJECT Spam detected | |
| /^Subject: VIRUS .+ IN MAIL FROM YOU/ REJECT Spam detected | |
| /^Subject: Virus Notification:/ REJECT Spam detected | |
| /^Subject: Virus found in a message you sent/ REJECT Spam detected | |
| /^Subject: Virus found in sent message/ REJECT Spam detected | |
| /^Subject: VIRUS EN SU CORREO/ REJECT Spam detected | |
| /^Subject: Warning: antivirus system report$/ REJECT Spam detected | |
| /^Subject: MDaemon Notification -- Attachment Removed$/ REJECT Spam detected | |
| /^Subject: Information - Antivirus$/ REJECT Spam detected | |
| /^Subject: Symantec AntiVirus detected a violation/ REJECT Spam detected | |
| /^Subject: WARNING: YOU WERE SENT A VIRUS/ REJECT Spam detected | |
| /^Subject: SAV detected a violation in a document/ REJECT Spam detected | |
| /^Subject: MailMarshal has detected a suspect attachment/ REJECT Spam detected | |
| /^Subject: A virus was detected in your m/ REJECT Spam detected | |
| /^Subject: Recipient Virus-alert/ REJECT Spam detected | |
| /^Subject: Virus Found in message/ REJECT Spam detected | |
| /^Subject: E-?mail viruses detected/ REJECT Spam detected | |
| /^Subject: Undelivered mail: VIRUS FOUND/ REJECT Spam detected | |
| /^Subject: Quarantined Mail: virus from/ REJECT Spam detected | |
| /^Subject: Attenzione Virus/ REJECT Spam detected | |
| /^Subject: \[MailServer Notification\]To Sender virus found/ REJECT Spam detected | |
| /^Subject: virus in verschickter Nachricht gefunden/ REJECT Spam detected | |
| /^Subject: MailMarshal has detected a Virus in your message/ REJECT Spam detected | |
| /^Subject: Virus encontrado en el mensaje enviado/ REJECT Spam detected | |
| /^Subject: Security Alert - ScanMail for Lotus Notes/ REJECT Spam detected | |
| /^Subject: Virus Infection Alert/ REJECT Spam detected | |
| /^Subject: Warning - Virus Detected:/ REJECT Spam detected | |
| /^Subject: Skynet Mail Protection scan results/ REJECT Spam detected | |
| /^X-BLTSYMAVREINSERT/ REJECT Spam detected | |
| /^X-Virus-Scan-Result: Repaired/ REJECT Spam detected | |
| /^X-.*-MailScanner: Found to be infected/ REJECT Spam detected | |
| /^X-Scanned: Symantec Antivirus Scan - Virus found/ REJECT Spam detected | |
| /^X-Sender: NetMail AntiVirus Agent/ REJECT Spam detected | |
| /^X-Auto-Generated: Sophos antivirus plugin/ REJECT Spam detected | |
| /^Subject: Virusveszely! Virus warning!/ REJECT Spam detected | |
| /^Subject: Virus in mail from you\./ REJECT Spam detected | |
| /^Subject: Virus infection notice/ REJECT Spam detected | |
| /^Subject: Possible virus found in message you sent/ REJECT Spam detected | |
| /^Subject: AntiVir ALERT/ REJECT Spam detected | |
| /^Subject: Centrale Anti-Virus melding/ REJECT Spam detected | |
| /^Subject: Vexira ALERT/ REJECT Spam detected | |
| /^X-ELTE-VirusStatus: was_infected/ REJECT Spam detected | |
| /^Subject: You sent potentially unsafe content/ REJECT Spam detected | |
| /^Subject: Hov, du har sendt Jubii en virus !!!$/ REJECT Spam detected | |
| /^Subject: \[message from .*virus detect system\]$/ REJECT Spam detected | |
| /^Subject: Net Integrator Virus Alert$/ REJECT Spam detected | |
| /^Subject: AntiVirus Alert!$/ REJECT Spam detected | |
| /^Subject: \{ALERTA DE VIRUS\}/ REJECT Spam detected | |
| /^Subject: Virus in una mail per lei/ REJECT Spam detected | |
| /^Subject: .*AntiVirus scan results/ REJECT Spam detected | |
| /^X-Mailer: ravmd\// REJECT Spam detected | |
| /^Subject:.*ALERTE \- Vous avez envoye un mail avec virus/ REJECT Spam detected | |
| /^Subject:.*ALERTE\: un virus a / REJECT Spam detected | |
| /^Subject:.*ALERT\! Virus found in your mail/ REJECT Spam detected | |
| /^Subject:.*Anti-Virus Notification/ REJECT Spam detected | |
| /^Subject:.*Antigen Notification/ REJECT Spam detected | |
| /^Subject:.*Antigen found VIRUS/ REJECT Spam detected | |
| /^Subject:.*Antivirus stopped your message/ REJECT Spam detected | |
| /^Subject:.*Email Quarantined Due to Virus/ REJECT Spam detected | |
| /^Subject:.*Failed to clean virus file/ REJECT Spam detected | |
| /^Subject:.*Inflex scan report \[\d+\]/ REJECT Spam detected | |
| /^Subject:.*InterScan NT Alert/ REJECT Spam detected | |
| /^Subject:.*MMS Notification/ REJECT Spam detected | |
| /^Subject:.*MailSure Virus Alert/ REJECT Spam detected | |
| /^Subject:.*Ochrona antywirusowa/ REJECT Spam detected | |
| /^Subject:.*\! Virus Notify \!/ REJECT Spam detected | |
| /^Subject:.*SAV detected a violation in a / REJECT Spam detected | |
| /^Subject:.*VIRUS NO SEU EMAIL/ REJECT Spam detected | |
| /^Subject:.*Virus Check Alert/ REJECT Spam detected | |
| /^Subject:.*Virus Notification from Redstone/ REJECT Spam detected | |
| /^Subject:.*Virus Quarantine Notification/ REJECT Spam detected | |
| /^Subject:.*Virus in Ihrer Nachricht/ REJECT Spam detected | |
| /^Subject:.*Votre message contient un virus/ REJECT Spam detected | |
| /^Subject:.*Warning\: E-mail viruses detected/ REJECT Spam detected | |
| /^Subject:.*WorldSecure Server notification/ REJECT Spam detected | |
| /^Subject:.*\[SmartFilter\] Virus Alert / REJECT Spam detected | |
| /^Subject:.*\[Virus detected\]/ REJECT Spam detected | |
| /^Subject:.*virus trouve dans le message envoye/ REJECT Spam detected | |
| /^Subject:.*virus trovato in un messaggio inviato/ REJECT Spam detected | |
| /^Subject: HBOS plc Automated Email Administrator/ REJECT Spam detected | |
| /^Subject: Virus found:/ REJECT Spam detected | |
| /^Subject: Your mail server sent us a virus/ REJECT Spam detected | |
| /^Subject: This is an alert from eSafe$/ REJECT Spam detected | |
| /^Subject: Virus encontrado/ REJECT Spam detected | |
| /^Subject: Notification du serveur antivirus/ REJECT Spam detected | |
| /^Subject: NAV ha rilevato un virus in un documento inviato$/ REJECT Spam detected | |
| /^Subject: Network Associates Webshield - e-mail Content Alert$/ REJECT Spam detected | |
| /^Subject: Symantec AntiVirus\/Filtering for Domino detected a virus/ REJECT Spam detected | |
| /^Subject: Eclipse Internet VIRUSshield detected VIRUS/ REJECT Spam detected | |
| /^Subject: VIRUS MESSAGE$/ REJECT Spam detected | |
| /^Subject: Internet Mail Failure - Virus Alert$/ REJECT Spam detected | |
| /^Subject: FOUND VIRUS IN YOUR MAIL TO:/ REJECT Spam detected | |
| /^Subject: ALERT - Virus .+ found/ REJECT Spam detected | |
| /^Subject: Suppresion du Virus/ REJECT Spam detected | |
| /^Subject: Tipo de arquivo anexo nao permitido!/ REJECT Spam detected | |
| /^Subject: \[.+: Virus detected\]$/ REJECT Spam detected | |
| /^Subject: RAV[0-9]+ Antivirus notification/ REJECT Spam detected | |
| /^Subject: ATTENZIONE: Ricevuto VIRUS da/ REJECT Spam detected | |
| /^Subject: Warning: antivirus system report/ REJECT Spam detected | |
| /^Subject: WARNING: We blocked a virus that was sent to you/ REJECT Spam detected | |
| /^Subject: ScanMail Message: To Sender, virus found and action taken/ REJECT Spam detected | |
| /^Subject: Warning: A possible virus has been detected in one of your/ REJECT Spam detected | |
| /^Subject: Symantec har fundet en virus i den mail du har sendt/ REJECT Spam detected | |
| /^Subject: Rejected Mail: attachment from/ REJECT Spam detected | |
| /^Subject: Returned mail: Possible Virus Infection/ REJECT Spam detected | |
| /^Subject: VIRUS \(.*\) FROM <.*>/ REJECT Spam detected | |
| /^Subject: Symantec Mail Security detected/ REJECT Spam detected | |
| /^Subject: Attachments not Delivered by MailScan/ REJECT Spam detected | |
| /^Subject: .+action taken by attachment blocking feature/ REJECT Spam detected | |
| /^Subject: You sent infected message/ REJECT Spam detected | |
| /^Subject: .+e-mail Content Alert$/ REJECT Spam detected | |
| /^Subject: VIRUSALARM/ REJECT Spam detected | |
| /^Subject: Virusdetection:/ REJECT Spam detected | |
| /^Subject: Recipient Virus-alert/ REJECT Spam detected | |
| /^Subject: Norton AntiVirus quarantined an attachment in a message/ REJECT Spam detected | |
| /^Subject: MailMonitor for Exchange has processed a suspicious mail/ REJECT Spam detected | |
| /^Subject: WARNING: YOU MAY HAVE A VIRUS/ REJECT Spam detected | |
| /^X-Tnz-Problem-Type: 40/ REJECT Spam detected | |
| /^Subject: Discarded Mail: virus from/ REJECT Spam detected | |
| /^Subject: SafeInternetEmail Notification/ REJECT Spam detected | |
| /^Subject: Subject: CMC MAIL GATEWAY ALERT/ REJECT Spam detected | |
| /^Subject: Warning: Possible Virus Infection/ REJECT Spam detected | |
| /^Subject: .*\/ VIRUS SENT FROM YOUR ADDRESS/ REJECT Spam detected | |
| /^Subject: virus encontrado/ REJECT Spam detected | |
| /^Subject: .*virus detectado/ REJECT Spam detected | |
| /^Subject: virus interceptado/ REJECT Spam detected | |
| /^Subject: Virus en un correo electr/ REJECT Spam detected | |
| /^Subject: virus de e-mail detectado/ REJECT Spam detected | |
| /^Subject: virus en su correo/ REJECT Spam detected | |
| /^Subject: incidencia de virus/ REJECT Spam detected | |
| /^Subject: violaci[oó]n de contenido/ REJECT Spam detected | |
| /^Subject: contenido no permitido/ REJECT Spam detected | |
| /^Subject: alerta del antivirus/ REJECT Spam detected | |
| /^Subject: VIRUS .* EN CORREO PRESUMIBLEMENTE SUYO/ REJECT Spam detected | |
| /^Subject: detectado un virus en su mensaje/ REJECT Spam detected | |
| /^Subject: fichero adjunto no permitido encontrado/ REJECT Spam detected | |
| /^Subject: Antigen encontr[oó] el fichero/ REJECT Spam detected | |
| /^Subject: Quarantined Mail: attachment from/ REJECT Spam detected | |
| /^Subject: GWAVA Sender Notification (Virus infection)/ REJECT Spam detected | |
| /^Subject: ?BitDefender found an infected/ REJECT Spam detected | |
| /^Subject: \[Virus\] Policy Violation/ REJECT Spam detected | |
| /^Subject: Non delivery report: 5.*(Virus infection)/ REJECT Spam detected | |
| /^(Received|Message-Id|X-(Mailer|Sender)):.*\b(AutoMail|E-Broadcaster|Emailer Platinum|Thunder Server|eMarksman|Extractor|e-Merge|from stealth[^.]|Global Messenger|GroupMaster|Mailcast|MailKing|Match10|MassE-Mail|massmail\.pl|News Breaker|Powermailer|Quick Shot|Ready Aim | |
| Fire|WindoZ|WorldMerge|Yourdora|Lite)\b/ REJECT No mass mailers allowed. You are probably sending spam | |
| /^X-Mailer:.*\b(Aristotle|Avalanche|Blaster|Bomber|DejaVu|eMerge|Extractor|UltraMail|Sonic|Floodgate|GeoList|Mach10|MegaPro|Aureate|MultiMailer|Bluecom|Achi-Kochi Mail|Direct Email|Andrew's SuperCool Blastoise|MailerGear|Advanced Mass Sender|SpireMail|MailWorkZ|UltimDBMa | |
| il|Mabry|Lite)\b/ REJECT No mass mailers allowed. You are probably sending spam. | |
| /^(To|From|Cc|Reply-To):.*@optonline/ REJECT Sorry, your message is probably spam | |
| /^Subject: =?EUC-KR?/ REJECT Korean encoding not allowed by this server | |
| /^Subject: =?Windows-1251?/ REJECT Russian encoding not allowed by this server | |
| /^Subject: =\?KOI8-R\?/ REJECT Russian encoding not allowed by this server | |
| /^Subject: ADV:/ REJECT Advertisements not accepted by this server | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment