如何处理每次来自不同ip地址内容为固定图片+不固定文字的垃圾邮件

landfish

如题，最近为垃圾邮件头疼！
我仔细研究了一下垃圾邮件，每次的图片是一样的，但是图片下面的大段英文每次都会改变，每次的源
IP都是不同，服务器装有一款叫GFI的antispam software但是没有任何作用。不知大家有何高见

我在FGI的英文论坛研究了半天，N多老外也是面对这个问题毫无办法。因为文本是随机的大段英文所以绝对
无法过滤，图片是embedded内嵌的，来源ip也是随机的。官方的解决方法是通杀所以内嵌图片的邮件-----
很显示那是不显示的，~~如果sender的签名档是一个图片，那么这封邮件肯定会被block。


头文件1：
Microsoft Mail Internet Headers Version 2.0
Received: from gwly-0-2-41.802.cz ([85.132.249.41]) by
mail.XXXtechnology.com.cn with Microsoft SMTPSVC(6.0.3790.1830);
  Sun, 8 Oct 2006 23:09:07 +0800
Message-ID: <000b01c6eaeb$a6cb3ff0$0501a8c0@gwly-0-2-41.802.cz>
Reply-To: "Dick" <hohn@consumer-marketing.com>
From: "Dick" <hohn@consumer-marketing.com>
To: "selvestre" <xxxxx
Subject: time is now
Date: Sun, 08 Oct 2006 17:08:46 +0100
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0007_01C6EAEB.A6CB3FF0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4807.1700
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700
Return-Path: hohn@consumer-marketing.com
X-OriginalArrivalTime: 08 Oct 2006 15:09:08.0487 (UTC)
FILETIME=[B401D170:01C6EAEB]

------=_NextPart_000_0007_01C6EAEB.A6CB3FF0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0008_01C6EAEB.A6CB3FF0"

------=_NextPart_001_0008_01C6EAEB.A6CB3FF0
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

------=_NextPart_001_0008_01C6EAEB.A6CB3FF0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable


------=_NextPart_001_0008_01C6EAEB.A6CB3FF0--
------=_NextPart_000_0007_01C6EAEB.A6CB3FF0
Content-Type: image/gif;
name="Rip6zkCGAo.gif"
Content-Transfer-Encoding: base64
Content-ID: <FizxyWhWKvnQxM3328fB>


------=_NextPart_000_0007_01C6EAEB.A6CB3FF0--

头文件2：
Microsoft Mail Internet Headers Version 2.0
Received: from adsl-69-237-6-169.dsl.irvnca.pacbell.net ([69.237.6.169]) by
xxxxxxtechnology.com.cn with Microsoft SMTPSVC(6.0.3790.1830);
  Sun, 8 Oct 2006 05:54:54 +0800
Message-ID:
<000b01c6ea5b$3c0f0a60$cf00a8c0@adsl-69-237-6-169.dsl.irvnca.pacbell.net>
Reply-To: "Evangelina" <chemtex@ectours.com>
From: "Evangelina" <chemtex@ectours.com>
To: "donovon" <xxxxxxx>
Subject: try it out
Date: Sat, 07 Oct 2006 14:54:59 -0800
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0007_01C6EA5B.3C0F0A60"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Return-Path: chemtex@ectours.com
X-OriginalArrivalTime: 07 Oct 2006 21:54:54.0959 (UTC)
FILETIME=[3938DFF0:01C6EA5B]

------=_NextPart_000_0007_01C6EA5B.3C0F0A60
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0008_01C6EA5B.3C0F0A60"

------=_NextPart_001_0008_01C6EA5B.3C0F0A60
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

------=_NextPart_001_0008_01C6EA5B.3C0F0A60
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable


------=_NextPart_001_0008_01C6EA5B.3C0F0A60--
------=_NextPart_000_0007_01C6EA5B.3C0F0A60
Content-Type: image/gif;
name="DUvscpChKa.gif"
Content-Transfer-Encoding: base64
Content-ID: <VwxdpXtZsF24Lsg45kFA>


------=_NextPart_000_0007_01C6EA5B.3C0F0A60--

还有很多类似的，服务器装有一款名叫GFI的反垃圾邮件软件~~~但是似乎也没有用
环境是Win2k3SP1  Exchange 2k3SP2~~~请问大家有何高见，先谢过了！

[ 本帖最后由 landfish 于 2006-10-13 16:12 编辑 ]

landfish

难道就没有人遇到过这种现象吗？？？

smallbigbox

有
出现这种问题，你又没有防垃圾邮件的软件的话，最简单，在防火墙上deny这个地址

砸锅卖铁

楼主说IP地址都不同，Deny地址行不通

abdxj

过滤关键字即可

px008

怎么过滤,是否可以说的具体些!

砸锅卖铁

在你的反垃圾邮件上设置

landfish

自己顶

landfish

up

atong999888

用outlook打开那封垃圾邮件, 按右键-->查看源文件
把内容发出来给大家看一下.