[exim] Cleaner way to stop phishing spam?

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Marc Perkel
Datum:  
To: exim-users
Betreff: [exim] Cleaner way to stop phishing spam?
Looking for a cleaner way to do this - like with a list?

warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.paypal\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.paypal.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Paypal
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.ebay\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.ebay\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked eBay
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.ebay\.co\.uk\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.ebay\.co\.uk\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked eBay UK
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.amazon\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.amazon\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Amazon
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.capitalone\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.capitalone\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Capital One
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.chase\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.chase\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Chase
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.bankofamerica\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.bankofamerica\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Bank of America
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.bofa\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.bofa\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Bank of America
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.usbank\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.usbank\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked US Bank
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.egold\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.egold\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked eGold
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.rbc\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.rbc\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked RBC Financial
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.wellsfargo\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.wellsfargo\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Wells Fargo Bank
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.mastercard\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.mastercard\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked MasterCard
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.visa\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.visa\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Visa Card
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.barclays\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.barclays\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Barclays
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.wamu\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.wamu\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Washington mutual
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.westernunion\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.westernunion\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Western Union
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.bancorpsouth\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.bancorpsouth\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Bancorpsouth
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.wachovia\.com\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.wachovia\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked eBay
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.rbs\.co\.uk\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.rbs\.co\.uk\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked Royal Bank of Scotland
    acl = phishing


warn    condition = ${if 
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.ncua.gov\N}{yes}{no}}
    condition = ${if or 
{{!match{$h_Received:}{\N\.ncua\.gov\N}}{eq{$sender_host_name}{}}}{yes}{no}}
    set acl_c2 = Faked NCUA
    acl = phishing