# # $Id: body_checks,v 1.15 2003/12/20 04:51:36 dhw Exp peter $ # # to be used with: body_checks = regexp:/etc/postfix/body_checks # Specify "/^stuff you do not want$/ REJECT" # #/^Content-Type: application\/octet-stream/ REJECT # Cute one: # From: "Michael W. Oliver" # Date: Fri, 19 Sep 2003 17:48:09 -0400 # ... # I have found the following line in my Postfix body_checks.regexp to be very # satisfying: /^TVqQAAMA/ REJECT # Googling for that eight character string revealed it as the common # denominator for win32 execs. # /Affordable Marketing Tools/ REJECT /UFBQUFBQUFBQUFBQUFBQUFBQUF/ REJECT /^Dear Prospective Partner/ REJECT /SANI ABACHA/ REJECT /^----- FREE UNLIMITED ACCESS-----$/ REJECT /AS\s+SEEN\s+ON\s+NATIONAL\s+TV/ REJECT /^Dear IT Manager/ REJECT /http:\/\/%77%77%77\./ REJECT /http:\/\/groups\.msn\.com\/mygroups/ REJECT /http:\/\/www\.in\-box\-offers\.org/ REJECT /http:\/\/www\.affordable\-domains\.com/ REJECT /http:\/\/www\.get6g7\.com/ REJECT /http:\/\/www\.iyuybb789\.com/ REJECT /http:\/\/www\.weightlossgold\.com/ REJECT /http:\/\/centrip\.com/ REJECT /http:\/\/pdakt\.com/ REJECT /http:\/\/www\.centralremovalservice\.com/ REJECT /http:\/\/61\.106\.11\.129\// REJECT /http:\/\/210\.124\.122\.11\// REJECT /http:\/\/211\.162\.108\.122\// REJECT /http:\/\/www\.e-mailpromo\.net/ REJECT /http:\/\/www\.authenticreport\.com/ REJECT /http:\/\/click\.emailofferz\.net/ REJECT /http:\/\/canadalobster\.net/ REJECT /http:\/\/myhome\.hanafos\.com/ REJECT /http:\/\/www\.offerbonanza\.com/ REJECT /http:\/\/boletineselectronicos\.com/ REJECT /http:\/\/www\.mustgo\.net/ REJECT /http:\/\/www\.webfeel\.net/ REJECT /http:\/\/26\.to\// REJECT /http:\/\/www\.upstage\.co\.kr/ REJECT /http:\/\/db\.blueweb\.co\.kr/ REJECT /http:\/\/www\.crazychina\.co\.kr/ REJECT /http:\/\/beautynewyear\.by\.ru/ REJECT /http:\/\/www\.0035\.co\.kr/ REJECT /http:\/\/optweb2\.optmails\.com/ REJECT /http:\/\/www\.sheldeez\.com/ REJECT /http:\/\/ukmaildeliverysubsystem\.com/ REJECT /http:\/\/click\.valuevalet\.com/ REJECT /http:\/\/www\.rollie\.biz/ REJECT /http:\/\/www\.hortie\.biz/ REJECT /http:\/\/www\.treasurecity\.biz/ REJECT /http:\/\/www\.best-soft\.biz/ REJECT /http:\/\/6md\.info\// REJECT /http:\/\/6md\.us\// REJECT /http:\/\/www\.schoolr54\.com\// REJECT /http:\/\/www\.test57v6\.com\// REJECT /http:\/\/www\.78jh89\.com\// REJECT /http:\/\/www\.78yun0c\.com\// REJECT /http:\/\/www\.iyuybb789\.com\// REJECT /http:\/\/www\.re55steel4\.com\// REJECT /http:\/\/www\.now89v\.com\// REJECT /http:\/\/www\.8988uinny7\.com\// REJECT /http:\/\/counter\.kimo\.com\.tw/ REJECT /http:\/\/newyaer2004\.2itb\.com/ REJECT /http:\/\/www\.webinfomount\.com\// REJECT /http:\/\/www\.wilsonweb\.info\// REJECT /http:\/\/www\.nwwsubscribe\.com\// REJECT /http:\/\/listserv\.aol\.com\// REJECT /http:\/\/www\.giftforthehome\.com\// REJECT /http:\/\/www\.expressindia\.com\// REJECT /http:\/\/www\.ientry\.com\// REJECT /http:\/\/www\.cdrom2go\.com\// REJECT /http:\/\/www\.dumpia\.com\// REJECT /http:\/\/www\.exambuddy\.com\// REJECT /http:\/\/www\.makeworksheets\.com\// REJECT /http:\/\/www\.getworksheets\.com\// REJECT /http:\/\/www\.teach-nology\.com\// REJECT /http:\/\/aweber\.com\// REJECT /http:\/\/mailian\.net\// REJECT /http:\/\/fdncenter\.org\// REJECT /http:\/\/imm\.cc\// REJECT /http:\/\/dynamic\/secretstotheirsuccess\.com\// REJECT /http:\/\/www\/miniclip\.com\// REJECT /http:\/\/www\/ecommercetimes\.com\// REJECT /http:\/\/www\/ezinfocenter\.com\// REJECT /http:\/\/perso\/wanadoo\.fr\/engel-boutik/ REJECT /http:\/\/banner\/pillipin\.com\// REJECT /http:\/\/uszazi\.com\// REJECT /http:\/\/www\/startspot\.com\// REJECT /http:\/\/www\/superkids\.com\// REJECT /http:\/\/www\.casinowelt\.at/ REJECT /@isc2\.org/ REJECT /^Hello Dear!,[ ]*$/ REJECT /HOW TO ADVERTISE ON THE INTERNET FOR FREE/ REJECT /^This is the new crack for porn site. Please download and check program.
/ REJECT /^This is an interesting movie clip. You will enjoy it.
/ REJECT /^I send you this file in order to have your advice$/ REJECT /^Te mando este archivo para que me des tu punto de vista/ REJECT /Below is the result of your feedback form/ REJECT /If you don't have enough money to buy needed software/ REJECT /CHECK OUR PRICES ON SOFTWARE/ REJECT /\.biz\/nomore/ REJECT /\@ms[0-9]*\.hinet\.net/ REJECT /\.windowstest\.net/ REJECT /\.tmaf\.net/ REJECT /ebestquotes\.biz/ REJECT /\.10cialagenius\.biz/ REJECT /\.emailpromo\.biz/ REJECT /\.closers\.net/ REJECT /\.police-test\.net/ REJECT /oem-discounts\.biz/ REJECT /best1netoffrs\.biz/ REJECT /The powerful, effective and intelligent e-mail guardian tool/ REJECT /fill out surveys from home/ REJECT /Detaily vysledkov analyzy:/ REJECT /contacting you is to solicit/ REJECT /POLISH CINEMA CLASSICS/ REJECT /CHRISTMAS GIFT CANDIDATES/ REJECT /participate.in.the.lottery/ REJECT /Penny Stock Insider/ REJECT /Vous en remerciant par avance, je vous prie/ REJECT /^REQUEST FOR A MUTUALLY BENEFICIAL BUSINESS/ REJECT /^This game is my first work/ REJECT /^This is the file with the information that you ask for/ REJECT /^Congratulations .* prize winner! You have been/ REJECT / dormant for the last .* years/ REJECT / money in .* account/ REJECT /bank account details/ REJECT /your nominated bank account/ REJECT / huge amount of money that I will/ REJECT / money to a foreign account/ REJECT / MONEY WAS RETRIEVED AFTER HE DIED/ REJECT / require foreign assist/ REJECT / REPUBLIC OF NIGERIA/ REJECT /APPELLE L'ASSISTANCE/ REJECT / here in nigeria/ REJECT /\.affordable-domains\./ REJECT /stock buyer's alert/ REJECT /cash bonus/ REJECT /coach\*invest/ REJECT /optout\.shtml/ REJECT /enlarge.*penis/ REJECT /e[^a-z]r[^a-z]e[^a-z]c[^a-z]t[^a-z]i[^a-z]o[^a-z]n/ REJECT /health discovery that actually reverses/ REJECT /here for a free sample/ REJECT /lucky players/ REJECT /discount prescriptions/ REJECT /hilton.* video/ REJECT /powerful, effective and intelligent anti-spam tool/ REJECT /script language="JavaScript"/ REJECT /special military tribunal/ REJECT /Thank you for registering for/ REJECT /confirm your subscription/ REJECT /confirming your subscription/ REJECT /welcome to.*newsletter/ REJECT /subscribe.*newsletter/ REJECT /make money if you subscribe/ REJECT /If you don't want this type of.* e-mail/ REJECT /money to play at the casino/ REJECT /offer you a great sale/ REJECT /\.virtualvideos\./ REJECT /Worldwide Premier Lotto/ REJECT /\@r-and-m-consulting\.com/ REJECT /www\.dreamy\.com/ REJECT /www\.rouse\.com/ REJECT /\.golddd\.com/ REJECT /\.4343df\.com/ REJECT /\.545dre2c\.com/ REJECT /\.908h7cf\.com/ REJECT /\.s2u2\.com/ REJECT /\.allposters\.com/ REJECT /\.ockbuster\.com/ REJECT /bellaonline\.com/ REJECT /\.atsurvivalguides\.com/ REJECT /\.extremechatforums\.com/ REJECT /\.evidence-eliminator\.com/ REJECT /\.mobd01\.com/ REJECT /\.trekdata\.com/ REJECT /\.onlinegrantshere\.com/ REJECT /\.habitatetjardin\.com/ REJECT /\.goldforge\.com/ REJECT /\.realbargaindaily\.com/ REJECT /\.modellifestyle\.com/ REJECT /\.bidz\.com/ REJECT /\.cdatlow\.com/ REJECT /\.tourbus\.com/ REJECT /\.dubnh\.us\// REJECT /\.smartejob\.com/ REJECT /\.545dkldk\.com/ REJECT /\.mailftp\.net\/loan/ REJECT /\.solicitedemail\.net/ REJECT /\.deluxedeals\.net/ REJECT />SEE ME ON CAM/ REJECT /I would like to inform you about important information regarding your/ REJECT /^Dear friend , use this Internet Explorer patch now!/ REJECT /was believed to be infected by a virus/ REJECT /probabilmente contiene un virus .*messaggio/ REJECT /contained one or more attached files that were infected with a virus/ REJECT /^

A virus was intercepted before being routed to you/ REJECT /If you have recieved this email in error or are not the/ REJECT /The e-mail messages was infected with/ REJECT /mensaje infectado era el siguiente/ REJECT /correo infectado/ REJECT /were flagged by the antivirus scanner/ REJECT /was infected with .*virus/ REJECT /virus has been quarantined/ REJECT /^\W*virus warning message/ REJECT /removed from here because it contains a virus/ REJECT /If your mail server had better virus protection/ REJECT /
Undelivered mail to
/ REJECT /
I'm sorry =/ REJECT /
I'm sorry to have to inform you that/ REJECT /
I'm afraid the message returned below could not be delivered/ REJECT #/l(<[a-z]*>)?o(<[a-z]*>)?s(<[a-z]*>)?e(<[a-z]*>)?.*w(<[a-z]*>)?e(<[a-z]*>)?i(<[a-z]*>)?g(<[a-z]*>)?h(<[a-z]*>)?t/ REJECT /Your Perfect Match/ REJECT