A user has been receiving this spam email for a period of 2 weeks. I'm quite puzzle why sa never catch this. The sender domain does has spf record but there is no record on the spam score. I also created global filter to catch it but it didn't work.
My filter is something like this.... From contains [email protected]; and; To contains [email protected]; and; Body contains 抱歉; and; Body contains 您的邮件被退回来了
My filter is something like this.... From contains [email protected]; and; To contains [email protected]; and; Body contains 抱歉; and; Body contains 您的邮件被退回来了
Return-Path: <>
Delivered-To: [email protected]
Received: from server.mydomain.com
by server.mydomain.com with LMTP
id 3lpyCSZ9nGKmcwAAK+L+Iw
(envelope-from <>)
for <[email protected]>; Sun, 05 Jun 2022 17:53:42 +0800
Return-path: <>
Envelope-to: [email protected]
Delivery-date: Sun, 05 Jun 2022 17:53:42 +0800
Received: from mail-m9744.mail.163.com ([123.126.97.44]:57759)
by server.mydomain.com with esmtp (Exim 4.94.2)
id 1nxmx1-0007gw-8A
for [email protected]; Sun, 05 Jun 2022 17:53:41 +0800
From: [email protected]
To: [email protected]
X-Bounced-Version: 2022050511
Subject: =?gb2312?B?z7XNs83L0MU=?=
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_Part_25899_830792168.1650522289123"
Date: Sun, 5 Jun 2022 17:52:58 +0800 (CST)
Content-Transfer-Encoding: base64
Delivered-To: [email protected]@163.com
X-CM-Original-Message-ID: <[email protected]>
X-Mailer: Coremail MTA server
X-CM-TRANSID:xN1pCgDX56f3fJxif1k7Aw--.37818S3.B83653
Message-Id:<[email protected]>
X-Spam-Status: No, score=2.3
X-Spam-Score: 23
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "server.mydomain.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: 抱歉，您的邮件被退回来了…… 原邮件信息： 时 间 2022-06-05
17:52:57 主 题 收件人 [email protected] 退信原因： 邮件被反垃圾系统判定为垃圾邮件
英文说明:rejected by system 建议解决方案： 邮件内容中可能含有广告、欺诈、钓鱼、政治、色情类等内容。建议您绿色地使用邮箱，尝试调整邮件的主题、内容和附件内容并再次发送；或联系收件人所属邮件服务商的客服中心了解并解决。
Content analysis details: (2.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5173]
1.4 HTML_COMMENT_SAVED_URL BODY: HTML message is a saved web page
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 KAM_SHORT Use of a URL Shortener for very short URL
X-Spam-Flag: NO
Last edited by a moderator:
