文件操作 - body_checks.re

文件: /etc/postfix/body_checks.re

编辑文件内容

# 21-06-2024 sono un hacker di merd
/^.*Sono un hacker .*$/ REJECT Message body rejected 0158 [301]

# 03-07-2023 pubblicità video VirtualReel
/^.*VirtualReel .*$/ REJECT Message body rejected 0150 [301]

# 27-12-2022
/^.*cryptobot .*$/ REJECT Message body rejected 0150 [301]
/^.*cryptocurrency .*$/ REJECT Message body rejected 0151 [301]
/^.*systeme.io.*$/ REJECT Message body rejected 0152 [301]

/^.*bitcoin*$/i REJECT Message body rejected 0150 [301]

/^.*unique offer for lazy traders.*$/i REJECT Message body rejected 0152 [301]

# 26-12-2022
/^.*Per motivi di sicurezza, abbiamo sospeso l'accesso online al tuo conto bancario.*$/i REJECT Message body rejected 0149 [301]

# 26-08-2022 test funziona body check
# /^.*test funziona body.*$/i REJECT Message body rejected 0999 [301]
# ******************  OK FUNZIONA !

# 11-08-2022 Rinno aruba di M
# /^.*ZW50aWxlIGNsaWVud.*$/i REJECT Message body rejected 0120 [301]
# /^.*JViBjbGFzcz1lbWFpbC.*$/i REJECT Message body rejected 0120 [301]

# 09-07-2022 messaggi minatori per pagare in bitcoin
# sembra che arrivano "regolari" allora controllo che  la scritta
# bitcoin ci sia almento 2 volte
/^.*bitcoin.*bitcoin.*$/i REJECT Message body rejected 0110 [301]

# 05-07-2022 messaggi di dating donne
/^.*Cerca una donna per la comuni.*$/i REJECT Message body rejected 0109 [301]

# 30-06-2022 arriva mail farlocca google classroom UTF8
# /^.*pCdW9uZ2lvcm5vLA0KbHl0d.*$/i REJECT Message body rejected 0106 [301]

# 22-03-2022
# /^Organization: Sparkasse$/i REJECT content not allowed  0003
# /^.*Organization: Sparkasse.*$/i REJECT content not allowed  0004

# 27-02-2022 Mail da gruppi incontri ma sono da server "Puliti"
# /^.*magneticfinderc.com.*$/i REJECT content not allowed  0100 [301]
# /^.*sweetchicksdw.com.*$/i REJECT content not allowed 0101 [301]
# /^.*eticfinderc.com.*$/i REJECT content not allowed 0102 [301]
#/^.*sweetl0vers.com.*$/i REJECT content not allowed 0103 [301]
# ***********************  ATTENZIONE RINMUOVERE QUESTE SOTTO DOPO UNA WEEK DATA OGGI 01-03-2022

# /^.* sesso .*$/i REJECT Message body rejected 0104 [301]
# /^.* LGBT .*$/i REJECT Message body rejected 0105 [301]

# 17-03-2022 MAIL FAKE DOCUMENTO ZIP CON FILE XLMM --> ZIP UEsDBDMAAwBjAMF6cFT
/^.*ZIP parola:.*$/i REJECT content not allowed 0001
/^.*parola -.*$/i REJECT content not allowed 0002
/^.*allegati.*\.zip.*$/i REJECT content not allowed 0003
# /^.*\.zip.*$/i REJECT content not allowed 0004
# /^.*\.zip$/i REJECT content not allowed 0005

# 07-02-2022 MAIL FAKE LINKEDIN
# /^.*ET0NUWVBFIGh0bWwgUFVCTE.*$/i REJECT content not allowed 0107

#  20-01-2022 SUPER LOTTO
/^(super-lotto)|(.*super-lotto)|(.*super-lotto.*)$/i REJECT content not allowed  0106

# https://www.cyberciti.biz/tips/postfix-block-mime-attachment-files.html

# /^.* porno .*$/i REJECT Message body rejected [301]
# /^.* sex .*$/i REJECT Message body rejected [301]

/^.* super lotto .*$/i REJECT Message body rejected 0120 [301]
/^.* superlotto .*$/i REJECT Message body rejected 0121 [301]
/^.*super-lotto.*$/i REJECT Message body rejected 0122 [301]
/^.*superlotto.*$/i REJECT Message body rejected 0123 [301]

# 03-08-2021 Immediate BOOM OF SALES
/^.*Immediate BOOM OF SALES.*$/i REJECT Message body rejected 0124 [301]

# 07-07-2021 bitcoin reward
/^.*165qc1P4Zg9u4bGzvBsGR1jEEGx.*$/i REJECT Message body rejected 0125 [301]
/^.*transazioni Bitcoin.*$/i REJECT Message body rejected 0126 [301]

/^.*BLOQUEADA.*$/i REJECT Message body rejected 0110 0127 [301]
/^.*BLOQUEADA$/i REJECT Message body rejected 0111 0128 [301]

# 05-07-2021
/^.*mayboroda_alek.*$/ REJECT  Message body rejected 0109 [301]

# Ross 07-01-2021 Reject mail fake ebay contenuto (footer):
# 1995-2020 eBay Inc., eBay GmbH, Albert-Einstein-Ring
/^.*eBay Inc\., eBay GmbH, Albert-Einstein-Ring.*$/i REJECT Message body rejected 0108 [301]

# 25-09-2020 Ross  -->  blogspot.com
/^.*blogspot.com.*$/i REJECT Message body rejected 0112 [301]

# 13-10-2020 Ross --->  Mail che chiedono bit coin
/^.*trasferire bitcoin del valore.*$/i REJECT Message body rejected 0113 [301]

#
#  https://blog.taurus2.co.uk/2012/11/headerchecks-bodychecks-and-regexp.html
#
# viagra ( viagra v1agra vi4gra vi@gra viagr4 viagr@ v-iagra v i a g r a v-i-a-g-r-a vijagra vjiagra)
# /(VP[\-]RX|[vV][ j!\-\.]?[iI1][ j!\-\.]?[aA4@][ !j\-\.]?[gG][ !j\-\.]?[rR][ !j\-\.]?[aA4][ !j\-\.]?)/ REJECT Message body rejected 0114 [303]

# valium
# /[vV][j\\-\.! ]?[aAA4@][j\\-\.! ]?[lL|1][j\\-\.! ]?[iI\|1][j\\-\.! ]?[uU][j\\-\.! ]?[mM][j\\-\.! ]?/ REJECT Message body rejected 0115 [401]

# levitra
# /[lL\|1][j\\-\.! ]?[eE][j\\-\.! ]?[vV][j\\-\.! ]?[iI\|1][j\\-\.! ]?[tT][j\\-\.! ]?[rR][j\\-\.! ]?[aA][j\\-\.! ]?/ REJECT Message body rejected 0116 [303]

# ciallis
# /[cC][j\\-\.! ]?[iI\|1][j\\-\.! ]?[aA4@][j\\-\.! ]?[aA]?[lL\|1]*[j\\-\.! ]?[iI\|1][j\\-\.! ]?[sS5][j\\-\.! ]/ REJECT Message body rejected 0117 [304]

#MaxGain+
# /[mM][-\. ]?[aA4][-\. ]?[xX][-\. ]?[gG][-\. ]?[aA4][-\. ]?[iI1][-\. ]?[nN][+]?[!\.\? ]?/ REJECT Message body rejected 0118 [210]

# rolex or cartier
# /([rR][-\. ]?[oO0][-\. ]?[lL][-\. ]?[eE][-\. ]?[xX][\.\? ]?)|([cC][-\. ]?[aA4][-\. ]?[rR][-\. ]?[tT][-\. ]?[iI1][-\. ]?[eE][-\. ]?[rR][\.\? ]?)/ REJECT # Message body rejected 0121 [101]

# Here is one that is doing the rounds. The vertical pipe symbol acts as an OR. The words and whitespace are inside brackets, with a question mark afterwards. This means match either word 1 or 0 times. Meaning either word may, or may not be in the string. Useful!
# /[cC]aught( |you|me)?naked[\.\? ]?/ REJECT Message body rejected 0122 [038]

#
# Altri esempi
#
# /^<iframe src=(3D)?cid:.* height=(3D)?0 width=(3D)?0>$/  REJECT IFRAME vulnerability exploit

文件操作 - body_checks.re

文件: /etc/postfix/body_checks.re

编辑文件内容

修改文件时间

删除文件