Kenneth Porter skrev den 2013-02-22 02:03:
I'm noticing the following header in recent "romance" spam that looks like it might be an easy pattern to match.
its easy to make clamav sigs aswell :)but is the envelope-sender matching the unsubscribe domain ?, if so reject sender domain in mta
