I want to filter some keywords showing on the website.
For example,some adult keywords or some force keywords,I want apache change it to * or close the webpage.
I use cPanel/WHM but I find no place to do the setting.
Issues with emails with attachments getting filtered out.
I had put an attachment in an email that never get to it's destination. There were 2 flash files and a gif attached to it. That same email was send back today 2007-04-10 at 14:04 and was filtered out again.
Also, yesterday two emails were sent. Both emails had an mp3 file within them and were filtered out.
Got this automated response after sending an email with a .eml file in attachment :
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
Code:
testuser@local-domain.com
This message has been rejected because it has
a potentially executable attachment "Bigbox + intersticielle.eml"
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it.
EXIM filter logs:
2007-04-10 10:31:32 1HbIJd-0002z1-S5 from testuser@local-domain.com contained spam keywords
Confirmed:
- spam assasin disabled
- spam box disabled
- no email filters set up
- mx entry correct
- unlimited mail disk quota
My /etc/antivirus.exim:
Code:
# Exim filter
if not first_delivery
then
finish
endif
if ${length_80:$header_date:} is not $header_date:
then
fail text "This message has been rejected because it has
an overlength date field which can be used
to subvert Microsoft mail programs
The following URL has further information
[url]
seen finish
endif
if $header_from: contains "@sexyfun.net"
then
fail text "This message has been rejected since it has
the signature of a known virus in the header."
seen finish
endif
if error_message and $header_from: contains "Mailer-Daemon@"
then
# looks like a real error message - just ignore it
finish
endif
if $header_content-type: matches "(?:file)?name=("[^"]+\.(?:ad[ep]|ba[st]|chm|cmd|com|cpl|crt|eml|exe|hlp|hta|in[fs]|isp|jse?|lnk|md[be]|ms[cipt]|pcd|pif|reg|scr|sct|shs|url|vb[se]|ws[fhc])")"
then
fail text "This message has been rejected because it has
potentially executable content $1
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it."
seen finish
endif
# same again using unquoted filename [content_type_unquoted_fn_match]
if $header_content-type: matches "(?:file)?name=(\S+\.(?:ad[ep]|ba[st]|chm|cmd|com|cpl|crt|eml|exe|hlp|hta|in[fs]|isp|jse?|lnk|md[be]|ms[cipt]|pcd|pif|reg|scr|sct|shs|url|vb[se]|ws[fhc]))"
then
fail text "This message has been rejected because it has
potentially executable content $1
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it."
seen finish
endif
if $message_body matches "(?:Content-(?:Type:(?>\s*)[\w-]+/[\w-]+|Disposition:(?>\s*)attachment);(?>\s*)(?:file)?name=|begin(?>\s+)[0-7]{3,4}(?>\s+))("[^"]+\.(?:ad[ep]|ba[st]|chm|cmd|com|cpl|crt|eml|exe|hlp|hta|in[fs]|isp|jse?|lnk|md[be]|ms[cipt]|pcd|pif|reg|scr|sct|shs|url|vb[se]|ws[fhc])")[\s;]"
then
fail text "This message has been rejected because it has
a potentially executable attachment $1
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it."
seen finish
endif
# same again using unquoted filename [body_unquoted_fn_match]
if $message_body matches "(?:Content-(?:Type:(?>\s*)[\w-]+/[\w-]+|Disposition:(?>\s*)attachment);(?>\s*)(?:file)?name=|begin(?>\s+)[0-7]{3,4}(?>\s+))(\S+\.(?:ad[ep]|ba[st]|chm|cmd|com|cpl|crt|eml|exe|hlp|hta|in[fs]|isp|jse?|lnk|md[be]|ms[cipt]|pcd|pif|reg|scr|sct|shs|url|vb[se]|ws[fhc]))[\s;]"
then
fail text "This message has been rejected because it has
a potentially executable attachment $1
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it."
seen finish
endif
# START
# Filters all incoming an outgoing mail
logfile /var/log/filter.log 0644
## Common Spam
if
# Header Spam
$header_subject: contains "Pharmaceutical"
or $header_subject: contains "Viagra"
or $header_subject: contains "Cialis"
or $header_subject: is "The Ultimate Online Pharmaceutical"
or $header_subject: contains "***SPAM***"
or $header_subject: contains "[SPAM]"
# Body Spam
or $message_body: contains "Cialis"
or $message_body: contains "Viagra"
or $message_body: contains "Leavitra"
or $message_body: contains "St0ck"
or $message_body: contains "Viaagrra"
or $message_body: contains "Cia1iis"
or $message_body: contains "URGENT BUSINESS PROPOSAL"
or $message_body matches "angka[^s]+[net|com|org|biz|info|us|name]+?"
or $message_body matches "v(i|1)agra|vag(i|1)n(a|4)|pen( i|1)s|asu|seks|l(o|0)l(i|1)ta|dewacolok"
then
# Log Message - SENDS RESPONSE BACK TO SENDER
# SUGGESTED TO LEAVE OFF to prevent fail loops
# and more work for the mail system
#fail text "Message has been rejected because it hasn
# triggered our central filter."
logwrite "$tod_log $message_id from $sender_address contained spam keywords"
seen finish
endif
# END
# Filters all incoming an outgoing mail
Has anyone else had this happen with Enom?
My clients domain expired a couple days ago and his page now has links with the following keywords:
C*nt
Hairy P*ssy
Fat *ss
Big T*t
Round *ss
Monster D*ck
Big *ss T*t
I called Enom, and they're only response was, "Well why did you let that domain expire?"
I then asked for a supervisor and was told that one was not available.
Looks like its time to find a new domain reseller.
i try to make a email filter using cpanel options but dont work this its the code
Code:
if first_delivery
and ( ("$header_from:" contains "id@dominio.com")
or ("$header_from:" contains "id1@dominio.com")
or ("$header_from:" contains "id2@dominio.com")
)
then
unseen deliver "id3@dominio.com"
endif
and Also
Code:
if
$header_from: contains "id@dominio.com"
then
deliver "id3@dominio.com"
endif
the main idea its all outgoing mail from id@dominio.com must be
send a copy (bcc) to id3@dominio.com
I just found out all my mails sent to Gmail are marked as spam. However, if I check my IP address in independant grass-root spam databases, my IP address isn't blacklisted. I checked 7 of them. Do you know how to solve this problem
View 6 Replies View Relatedi was wondering if there is any other free anti-spam filter other than Spam Assassin that can be used on a VPS account?
View 13 Replies View RelatedDoes anyone know how I can create a server-side filter in Plesk 8? I need to filter incoming mail to my mail server (using X-Forwarded-For.
View 0 Replies View Related