Is anyone else getting hammered by Russian spam

Richard Mealing richard at fastnet.co.uk
Fri Mar 7 05:05:42 GMT 2014


Hi Philip,

Have you looked at RelayCountry plugin for spamassassin?

# Block countries
loadplugin Mail::SpamAssassin::Plugin::RelayCountry

header          RELAYCOUNTRY_BAD X-Relay-Countries =~ /^(RU|CN)/
describe        RELAYCOUNTRY_BAD foreign spam
score           RELAYCOUNTRY_BAD 3.0

I also add Russian uri links to a rule and this catches loads of stuff.

uri      LOCAL_URI_RU    m{https?://.{1,40}\.ru\b}
describe LOCAL_URI_RU Contains a URI hosted in RU
score   LOCAL_URI_RU 1.5


Hope this helps,
Rich

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Philip Parsons
Sent: 06 March 2014 15:57
To: MailScanner discussion
Subject: Is anyone else getting hammered by Russian spam

Any pointers of a rule that can block it ? It is all just Russian words. 

Thank you
P Parsons
-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 


More information about the MailScanner mailing list