[Postfixbuch-users] Fremdsprachige Emails

[postfix at wicker-klinik.de]

Hallo,

seit einigen Wochen werden wir mit Spams aus Russland/Oststaaten zugeballert. Leider erkennt SpamAsssin diese nicht (siehe unten). Gibt es eine Möglichkeit solche Emails rauszufischen, z.B. nach der Codepage, etc?

Danke und Gruß,
Andreas Brück
EDV-Abteilung Wicker-Klinik


SMTP-Header einer "Russland-Spammail":

Received: from wckhvmxrelay.wicker.de [192.168.1.5] by mail.wicker.de with DvISE PostMan (0207.414549444D4947514E50);
 26 May 2005 21:34:49 UT
Received: from localhost (localhost [127.0.0.1])
 by wckhvmxrelay.wicker.de (Postfix) with ESMTP id EC35DF3876
 for <dr.schumacher at wicker-klinik.de>; Mon, 23 May 2005 20:29:37 +0200 (CEST)
Received: from wckhvmxrelay.wicker.de ([127.0.0.1])
 by localhost (wckhvmxrelay [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 22669-03 for <dr.schumacher at wicker-klinik.de>;
 Mon, 23 May 2005 20:29:36 +0200 (CEST)
Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.171])
 by wckhvmxrelay.wicker.de (Postfix) with SMTP id 0C132F3867
 for <dr.schumacher at wicker-klinik.de>; Mon, 23 May 2005 20:29:35 +0200 (CEST)
Received: from [83.22.79.31] (helo=dwt31.neoplus.adsl.tpnet.pl)
 by mxeu13.kundenserver.de with ESMTP (Nemesis),
 id 0MKsEO-1DaHgA2lOl-0008C4 for dr.schumacher at wicker-klinik.de; Mon, 23 May 2005 20:29:30 +0200
Message-ID: <8ed001c55fe4$eef247a2$71e9aad7 at ifrance.com>
From: =?windows-1251?B?0eXs6O3g8CAtIO/w4Ory6Orz7A==?= <ancestry at ifrance.com>
To: dr.schumacher at wicker-klinik.de
Subject: =?windows-1251?B?0e7x8uDi6+Xt6OUg6O3i5fHy6Pbo7u3t7uPuICDh6Oft5fEgLSDv6+Dt4CDq7uzv?=
        =?windows-1251?B?4O3o6A==?=
Date: Mon, 23 May 2005 22:15:40 +0000
MIME-Version: 1.0
Content-Type: multipart/related;
    type="multipart/alternative";
    boundary="----=_NextPart_000_0000_F6AEC587.5756784F"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express V6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at wicker.de
X-Spam-Status: No, hits=0.6 tagged_above=-1000.0 required=6.3
 tests=DATE_IN_FUTURE_03_06, EXTRA_MPART_TYPE, HTML_30_40,
 HTML_FONT_BIG, HTML_MESSAGE
X-Spam-Level: 
-------------- nächster Teil --------------
Ein Dateianhang mit HTML-Daten wurde abgetrennt...
URL: <https://listi.jpberlin.de/pipermail/postfixbuch-users/attachments/20050527/d230e671/attachment.html>