Block the interface malware/virus emails

Discussion in 'Installation/Configuration' started by vk3heg, Nov 15, 2015.

  1. vk3heg

    vk3heg Member

    Hi Everyone,

    How would I go about blocking the following email. They always come from different ip's etc.
    I have put into the postfix global blacklist for "", and "[email protected]" yet the emails keep on coming.

    As a last resort I have put a block in amavis for any *.doc/*.docx files (Even those in zip files)

    Return-Path: <MAILER-DAEMON>
    X-Original-To: [email protected]
    Delivered-To: [email protected]
    Received: from localhost (unknown [])
    by (Postfix) with ESMTP id E767D2544A4D
    for <[email protected]>; Sun, 15 Nov 2015 11:40:39 +0000 (UTC)
    X-Envelope-From: <[email protected]>
    X-Envelope-To: <[email protected]>
    X-Envelope-To-Blocked: <[email protected]>
    X-Quarantine-ID: <yEZRL7BuL6qU>
    X-Amavis-Alert: BANNED, message contains .asc,document000292405.doc.js
    X-Spam-Flag: NO
    X-Spam-Score: 0
    X-Spam-Status: No, score=x tag=x tag2=x kill=x tests=[] autolearn=unavailable
    Received: from ([])
    by localhost ( []) (amavisd-new, port 10024)
    with ESMTP id yEZRL7BuL6qU for <[email protected]>;
    Sun, 15 Nov 2015 22:40:39 +1100 (AEDT)
    Received-SPF: none ( No applicable sender policy available); identity=mailfrom; envelope-from="[email protected]";; client-ip=
    Received: from ( [])
    by (Postfix) with ESMTP id 51DC0254451F
    for <[email protected]>; Sun, 15 Nov 2015 22:40:33 +1100 (AEDT)
    Received: by (Postfix, from userid 1625)
    id 44D36C5E43; Sun, 15 Nov 2015 12:40:30 +0100 (CET)
    To: [email protected]
    Subject: You have received fax, document 000292405
    Date: Sun, 15 Nov 2015 12:40:30 +0100
    From: "Interfax Online" <[email protected]>
    Reply-To: "Interfax Online" <[email protected]>
    Message-ID: <[email protected]>
    X-Priority: 3
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
    Content-Transfer-Encoding: 8bit

    New incoming fax document.

    You can find your fax document in the attachment.

    File size: 242 Kb
    Scanned: Sat, 14 Nov 2015 17:29:39 +0300
    Sender: Benjamin Hensley
    Pages number: 7
    Scan duration: 24 seconds
    Fax name: document000292405.doc
    Quality: 200 DPI

    Thanks for using Interfax service!

    [ application/zip (2259 bytes)]

Share This Page