Hi everyone:
Normally when i identify a host spammer i block entire server. Today i
receive one spam email. The origin is "mailgun.net", i already have a rule to
block him, but the email pass with no problem. I want stop the email, what is
wrong?
The header, config and rules are the following.
Best Regards and thanks in advance
Christian
Return-Path: <[email protected]>
X-Original-To: myemail
Delivered-To: myemail
Received: from m71-173.mailgun.net (m71-173.mailgun.net [166.78.71.173])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by myserver.com.ar (myserver.com.ar ) with ESMTPS id 37D7C5A6BA
for <[email protected]>; Thu, 16 Sep 2021 20:51:38 -0300 (ART)
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=garena.com; q=dns/txt;
s=mailo; t=1631836303; h=Content-Transfer-Encoding: Content-Type:
MIME-Version: Message-ID: Date: Subject: To: From: Sender;
bh=X5Ah9U6ZSR8KsuddY/hdSkKTBxEjdgWGe744jK8zHys=;
b=mKrVyQbkzXAIoBwlBXcBE3v5BnBFEyY+rYbwpIAnxYu//Ukemu0C5CHm5fpTFdWmJ4L4/mLC
hjlFQIj3Th/cWGEZHOSc49YmGwNdRIlQyifH+5PXG+WI4OvdieXopXLcq1Z6RQz1KH1ofze4
4Hs4XwDsrtERAMbLagMY5hJvQGA=
X-Mailgun-Sending-Ip: 166.78.71.173
X-Mailgun-Sid: WyJhNjAwYyIsICJzY2hAc2NobGFicy5jb20uYXIiLCAiMzZhNmQiXQ==
Received: from [127.0.1.1] (d117155235.ppp117155.cyberway.com.sg
[203.117.155.235]) by smtp-out-n02.prod.us-west-2.postgun.com with SMTP id
6143d87de0f78151d648bc6c; Thu, 16 Sep 2021 23:51:25 GMT
Sender: [email protected]
From: Adelgaza<myemail>
To: [email protected]
Subject: Quieres eliminar peso rapidamente ?
Date: 16 Sep 2021 18:51:21 -0500
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Status: R
X-Status: NC
X-KMail-EncryptionState:
X-KMail-SignatureState:
X-KMail-MDN-Sent:
my main.cf have the following rule:
smtpd_recipient_restrictions =
check_client_access regexp:/etc/postfix/spam/rcpt_cl_isp_prohibidos,
And in the file i have the rule:
/.*mailgun\.net.*/ REJECT NO!!!, ISP spammer contact myserver
--
Be Free, Be Linux
