postfix body_checks
をテンプレートにして作成
[
トップ
] [
新規
|
一覧
|
検索
|
最終更新
|
ヘルプ
|
ログイン
]
開始行:
CONTENTS
#contents
----
Lastmodified &lastmod;
----
*postfix body_checks [#sea02ec9]
echo -n ?”削除したい文字列?” | nkf -MB >> /usr/local/etc...
というEUCなファイルに、実行権を与えてPuttyで実行。追加に...
/^P6HJW8Xquca81F0gpM+kuz+hyQ==/ DISCAD
の様に整形。
*正規表現・ルールのTips [#ja727ce6]
【保存版】正規表現でエスケープが必要な文字一覧表
https://qiita.com/katsukii/items/1c1550f064b4686c04d4
正規表現: 文字クラス [ ] 内でエスケープしなくてもよい記号
https://techracho.bpsinc.jp/hachi8833/2017_05_30/40673
*postfix body_checks 一行スパム編 [#ja7f6100]
お世話になっている「正規表現チェッカー 」 http://okumocc...
なんだか、最近増えてきた、「一行スパム」。短い英文とURLだ...
一行だけのメールは、例えば日本語Mailmanの入会通知だったり...
取り敢えず、手元の「一行スパム」を見てみると、最短のものは
http://leapt.vslhnzlf.com/
で、半角26文字。一方、長めのは、
http://extrapolate.smarthealingcompany.com/ Time for won...
で、86文字ほど。
文字数だけの判定だと、
/^.{25,90}$/
でもいいけど、2バイト文字でもヒットしてしまうので、半角英...
/^[0-9a-zA-Z:.\/\s\'\?]{25,100}$/
これで、1行スパムの
Choose the best stimulant http://finch.familyhealthquali...
とかにはマッチするが、Mailman日本語の、
何処誰男 <********@gmail.com> さんが ABC に入会しました.
とかは、スルー。
*postfix body_checks [#t19d828c]
/usr/local/etc/postfix/main.cf
header_checks = regexp:/usr/local/etc/postfix/header_che...
body_checks = regexp:/usr/local/etc/postfix/body_checks
/usr/local/etc/postfix/body_checks
#http://centos.server-manual.com/centos5_postfix_header_...
#/^(|[^>].*)glsandoras@gmail/ REJECT
/glsandoras@gmail/ REJECT
/^glsandoras@gmail/ REJECT
/Blockbuster/ REJECT
/Biostem/ REJECT
/info@platina-1ine/ REJECT
# cat /var/log/maillog | grep reject
# cat /var/log/maillog | grep 'reject: body'
** 注意というかなんちゅうか [#m047d161]
全文英文のスパムメールに、共通する文字列を弾く設定をした...
と、おもったら、ご丁寧に?w 全文英文のメールを、さらにB...
Subject: i'm online
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
SGVsbG8gbXkgZGVhciAtIEkndmUgaGFkIGEgd2ViIGNhbWVyYSB3aXRo...
IHdyaXRlIG1lIC0gYW5kIEknbGwgZG8gd2hhdCB5b3Ugd2FudCBmb3Ig...
bm90IHNlZW4geW91IGluIGEgd2ViIGNhbWVyYS4NCk15IGVtYWlsIGFu...
Ymxlci5ydQ==
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
R3JlZXRpbmdzLCBpdCdzIE1hcmlhIGZyb20gUnVzc2lhISBwbGVhc2Ug...
b3RvcyB3aGVyZSB5b3UgYXJlIG5ha2VkIC0gSSB3YXMgc28gZXhjaXRl...
YXQgbXkgc2l0ZSBpbiB5b3VyIHByb2ZpbGUgLSBhZGRlZCBuZXcgcGlj...
eSBlbWFpbDogYW5ldGFzdTNsbkByYW1ibGVyLnJ1
----
http://s25r.blogspot.jp/2009/02/blog-post_13.html
http://seikatub.xrea.jp/
Message-ID: 20130803.111404249483210239554.babaq@mail-pe...
Date: Sat, 03 Aug 2013 11:16:11 +0900
From: =?x-sjis?B?g3aDiYNgg2mDiYNDg5Mg?=<mail@pedmsvwlpk....
Subject: =?x-sjis?B?jqmR7orHl52Xv4LwlaWCpILMgsUylE6K1IF5...
MIME-Version: 1.0
X-Mail-Agent: BASP21 Pro 1.0.1006.21 B21Soft
Content-Type: text/plain; charset=x-sjis
Content-Transfer-Encoding: base64
X-UIDL: +)%!!mk&!!cp["!E\Q"!
X-EsetId: 5C523B3DCE813A34081565
W4N2g4mDYINpg4mDQ4OTXYLmgugNCoHhgeGB4ZBWkoVNYWlsgfSB4oHi...
vJOIgt2C5oKxKDY0KYF4l2yC5oLoDQqQVpKFg4GBW4OLgvCO85BNgrWC...
DQpbg16DQ4Nng4tdDQqOqZHuiseXnZe/gvCVpYKkgsyCxTKUTorUgXmB...
MDAtgXqC8JWlgqSCzILFjF+W8YK1gsSCrYLqgtyCuYLxgqmBSJTUjYaN...
gsWMZ5HRgtaYQZeNibqCs4KigUINCg0KW5Z7lbZdgaaJe5eXlrOXvw0K...
ZG1zdndscGsuYml6L3BjL3Vzci9pbmRpdmlkdWFsLmFzcD9vdGlkPWVK...
MDEzMDczMTEyMzAzMiZpbT1BMDclNUYyMDEzMDgwMzExMTAxNSZJTkQ9...
CoGlW5azl7+DgYNig1qBW4NXXQ0KaHR0cDovL3BlZG1zdndscGsuYml6...
bmRpdmlkdWFsLmFzcD9vdGlkPWVKeW5GUXR2ZEUyMDEzMDczMTEyMzAz...
NUYyMDEzMDgwMzExMTAxNSZJTkQ9MTAwMDkwDQoNCo7hks6MYpT8jnGX...
l7+QXJC/gXqCqoKygrSCooLcgrWCvYFCjLuN3YFBgreC14LEgsyDVIFb...
U5azl7+CxYKyl5iXcJK4gq+C3IK3gUINCg0KWyCUepBNkuKOfoLNg1KD...
dHA6Ly9wZWRtc3Z3bHBrLmJpei9wYy91c3IvaW5kZXguYXNwP290aWQ9...
RTIwMTMwNzMxMTIzMDMyJmltPUEwNyU1RjIwMTMwODAzMTExMDE1DQqE...
hKqEqoSqhKqEqg0KW4GagqiLcZdsk2+YXo/ulfGBml0NCklEgUYxMDcy...
U1OBRjg1ODANCmFkZHJlc3OBRmt1amlAc21iLm5ldA0KhJ+En4SfhJ+E...
hJ8NCluBmoNUg0ODZ4OBg2qDhYFbgZpdDQqBoIKyi9+PioyfjfUNCmh0...
c3Z3bHBrLmJpei9wYy91c3IvaW5kaXZpZHVhbC5hc3A/b3RpZD1lSnlu...
MzA3MzExMjMwMzImaW09QTA3JTVGMjAxMzA4MDMxMTEwMTUmSU5EPTEw...
oIKyi9+PioyfjfUNCmh0dHA6Ly9wZWRtc3Z3bHBrLmJpei9wYy91c3Iv...
P290aWQ9ZUp5bkZRdHZkRTIwMTMwNzMxMTIzMDMyJmltPUEwNyU1RjIw...
MDE1DQoNCoGgluKCoo2Hgu2CuQ0KaW5mb0BwbGF0aW5hLTFpbmUuY29t...
n4SfhJ+En4SfhJ+Enw0KgXkxOY3OiMiP44LMgt2XmJdwicKBeg0KgXyD...
g0ODk46WlrGLx4F8DQppbmZvQHBsYXRpbmEtMWluZS5jb20NCg0KW4Ga...
tYLEgZpdDQqWe4OBgVuDi4LNl5iXcItLlvGCyZOviNOCs4LqgrKTb5he...
s4LqgsSCooLpgqiLcZdsgsmRzoK1lHqQTYKzgrmCxJK4gqKCxIKoguiC...
grWCvYpvgqaCzILIgqKP6o2Hgs2R5ZXPgqiO6JCUgsWCzYKygrSCooLc...
QYNog4yDWILmguiCsphBl42SuIKvgtyCt4LmgqSCqIrogqKSdoK1gtyC...
DQoNCg0KDQoNCg0KDQqWgIljk/GTZphGlqGQopRZlumJmA==
.
#ref(Line-ID.PNG)
From mqwlljj80260641923253@ezweb.ne.jp Wed Feb 5 19:30...
X-UIDL: cZ^"!FC]"!6na"!U%R!!
Return-Path: <mqwlljj80260641923253@ezweb.ne.jp>
X-Original-To: kuji@smb.net
Delivered-To: kuji@smb.net
Received: from hotshot (localhost [127.0.0.1])
by hotshot.smb.net (Postfix) with ESMTP id F2791...
for <kuji@smb.net>; Wed, 5 Feb 2014 19:30:01 +0...
X-Virus-Scanned: amavisd-new at smb.net
X-Spam-Flag: NO
X-Spam-Score: 11.339
X-Spam-Level: ***********
X-Spam-Status: No, score=11.339 tagged_above=5.31 requir...
tests=[AM.WBL=-9, BAYES_99=3.5, FORGED_MUA_IMS=1...
FROM_LOCAL_DIGITS=0.001, FROM_LOCAL_HEX=0.006, M...
RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_5...
RAZOR2_CHECK=0.922, RCVD_IN_BL_SPAMCOP_NET=1.347,
RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_RP_RNBL=1.31,
RCVD_IN_SORBS_HTTP=0.001, RCVD_IN_SORBS_SOCKS=1....
RCVD_IN_XBL=0.375, URIBL_BLACK=1.725, URIBL_DBL_...
URIBL_JP_SURBL=1.25] autolearn=spam
Received: from hotshot.smb.net ([127.0.0.1])
by hotshot (hotshot.smb.net [127.0.0.1]) (amavis...
with ESMTP id owAK4op4BxPO for <kuji@smb.net>;
Wed, 5 Feb 2014 19:29:44 +0900 (JST)
Received: from ssh.support-maintenance.com (ssh.support-...
by hotshot.smb.net (Postfix) with SMTP id C819A1...
for <kuji@smb.net>; Wed, 5 Feb 2014 19:29:38 +0...
Received: from 32.56.111.192 by ssh.support-maintenance....
From: "=?ISO-2022-JP?B?GyRCRExPQyUiJVclajQwQTRCUDF+ISobK...
To: kuji@smb.net
Subject: =?ISO-2022-JP?B?TElORS1JRBskQjdHPChIRCQrJGkkTiQ...
Date:Fri, 07 Feb 2014 13:26:13 +0300
X-Mailer: Internet Mail Service (5.5.2650.21)
MIME-Version: 1.0
Content-Type: text/plain; charset="SHIFT_JIS"
Content-Transfer-Encoding: 7bit
Status: RO
\x82\xa8\x97F\x92B\x90\\x90\xbf\x82\xaa1\x8c\x8f\x93\xcd...
\x81@
\x81\xa5\x89\xba\x8bLURL\x82\xa9\x82\xe7\x82\xb2\x8am\x9...
http://b2cxh42if9.asia
\x81@
\x81@
\x81\xa6LINE-ID\x8cf\x8e\xa6\x94\xc2\x82\xcc\x82\xb2\x97...
82\xb7\x82\xcc\x82\xc5\x88\xc0\x90S\x82\xb5\x82\xc4\x82\...
#ref(Line-ID2.PNG)
From trbdeeu86405758986@ezweb.ne.jp Mon Feb 10 11:40:35...
X-UIDL: E!X!!EMi"!DeT"!G`["!
Return-Path: <trbdeeu86405758986@ezweb.ne.jp>
X-Original-To: kuji@smb.net
Delivered-To: kuji@smb.net
Received: from hotshot (localhost [127.0.0.1])
by hotshot.smb.net (Postfix) with ESMTP id E53BE...
for <kuji@smb.net>; Mon, 10 Feb 2014 11:40:34 +0...
X-Virus-Scanned: amavisd-new at smb.net
X-Spam-Flag: NO
X-Spam-Score: 8.842
X-Spam-Level: ********
X-Spam-Status: No, score=8.842 tagged_above=5.31 require...
BAYES_99=3.5, DATE_IN_FUTURE_24_48=2.048, FH_FAK...
FORGED_MUA_OUTLOOK=1.927, MISSING_MID=0.497,
RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_5...
RAZOR2_CHECK=0.922, RCVD_DOUBLE_IP_SPAM=1.808, T...
URIBL_BLACK=1.725, URIBL_JP_SURBL=1.25] autolear...
Received: from hotshot.smb.net ([127.0.0.1])
by hotshot (hotshot.smb.net [127.0.0.1]) (amavis...
with ESMTP id vGjnJlDx33FD for <kuji@smb.net>;
Mon, 10 Feb 2014 11:40:16 +0900 (JST)
Received: from stiba.net (stiba.net [192.241.235.132])
by hotshot.smb.net (Postfix) with SMTP id 284E31...
for <kuji@smb.net>; Mon, 10 Feb 2014 11:40:15 +0...
Received: from 80.227.86.252 by 192.241.235.132; Wed, 12...
From: "=?ISO-2022-JP?B?GyRCIiE0MEE0TDVOQSEqGyhCTElORSgbJ...
To: kuji@smb.net
Subject: =?ISO-2022-JP?B?TElORSgbJEIlaSUkJXMbKEIpSUQbJEI...
Date:Wed, 12 Feb 2014 01:37:34 -0100
X-Mailer: Microsoft Outlook, Build 10.0.2616
MIME-Version: 1.0
Content-Type: text/plain; charset="SHIFT_JIS"
Content-Transfer-Encoding: 7bit
Status: RO
\x8f\xb3\x94F\x91\xd2\x82\xbf\x82\xcc\x97F\x90l\x82\xaa2...
\x81@
\x81\xa5\x8d\xa1\x82\xb7\x82\xae\x8f\xb3\x94F\x82\xb7\x8...
http://m2nwock12v.asia
\x81@
\x81@
\x81\xa6LINE(\x83\x89\x83C\x83\x93)ID\x8cf\x8e\xa6\x94\x...
\xa8\x82\xe8\x82\xdc\x82\xb7\x81B
**本文(body)の共通部分 [#z0d3b5cf]
\x81\xa6LINE
-
ID\x8cf\x8e\xa6\x94\xc2\x82\xcc\x82\xb2\x97\x98\x97p\x82...
\x82\xcc\x82\xc5\x88\xc0\x90S\x82\xb5\x82\xc4\x82\xb2\x9...
\x81\xa6LINE
(\x83\x89\x83C\x83\x93)
ID\x8cf\x8e\xa6\x94\xc2\x82\xcc\x82\xb2\x97\x98\x97p\x82...
\x81B
***body_checks [#o6e28cc7]
#/^\\x81\\xa6LINE/ REJECT
/ID\\x8cf\\x8e\\xa6\\x94\\xc2\\x82\\xcc\\x82\\xb2\\x97\\...
#.*2.*3.*|.*3.*2.* 2と3が両方使っているものを抜き出し
#/^\\x81\\xa6LINE|ID\\x8cf\\x8e\\xa6\\x94\\xc2\\x82\\xcc...
***header_checks に複数の拡張子を一行で記載する例 [#af9b4...
http://www.itmedia.co.jp/help/tips/linux/l0530.html
** mailの生データを見る [#o5d20138]
mail の2バイト文字の生データを見る際、通常のテキストエデ...
しかし、それではbody_checksなどのフィルターには使えないデ...
で、vi の登場である。
しかしながら、ファイルが大きい場合は、なにかと取り回しが...
ファイルの分割には、split コマンドをつかってみる。
split (option) [source file] (prefix)
オプション
オプション 機能
.-b 指定したバイト数で分割
.キロバイトは末尾に「k」、メガバイトは末尾に「m」を付ける
.-l 指定した行数ごとに分割
コマンド例
-split -b 100k file1 file1を100KBごとに分割
-split -l 1000 file2 file2を1000行ずつに分割
-split -b 1m file* test 名前がfileで始まるファイルを1MBご...
# split -b 1000000 file
# split -b 100000 xcb
などを繰り返して、適当なファイルサイズになったところで、
# vi xah
とかすると、スパムメールの文字データが見えるようになる
メール本文の文字列は、
#ref(spam.PNG)
こちらが生データ
Subject: =?ISO-2022-JP?B?TElORSgbJEIlaSUkJXMbKEIpGyRCJCs...
Date:Sat, 22 Feb 2014 02:30:56 -0100
X-Mailer: Internet Mail Service (5.5.2650.21)
MIME-Version: 1.0
Content-Type: text/plain; charset="SHIFT_JIS"
Content-Transfer-Encoding: 7bit
Status: RO
^[$B$"$N^[(BID^[$B7G<(HD$,!*BgI}%j%K%e!<%"%k$7$F?k$KI|3h...
^[$B:G?75!G=$,B??tDI2C$5$l!"99$K;H$$$d$9$/$J$j$^$7$?!*!*...
^[$B!!^[(B
^[$B"'?7$7$/$J$C$?^[(BID^[$B7G<(HD$O%3%A%i!*"'^[(B
http://sa8xtrudxo.asia
^[$B!!^[(B
^[$B!!^[(B
ID^[$B7G<(HD$O!"9qFb:GBg5i!"=q$-9~$_?t^[(BNo.1^[$B$NM'C#...
^[$B?7$7$/$J$C$?8!:w5!G=$r;H$C$FBt;3$NM'C#$H7R$,$m$&!*^[(B
**UFJ [#h6713173]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional...
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Cont...
<META name=GENERATOR content="MSHTML 8.00.6001.18702"></...
<BODY>
<P>*****************************************************...
<P>2014年「三菱東京UFJ銀行」のシステムセキュリティのアッ...
<P>以下のページより登録を続けてください。</P>
<P><A
href="http://www.gzxinhao.com/pic/">https://entry11.bk.m...
<P><BR>――Copyright(C)2014 The Bank of Tokyo-Mitsubishi U...
reserved――</P>
<P></P></BODY></HTML>
PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQu...
L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9o...
Zi04IiBodHRwLWVxdWl2PUNvbnRlbnQtVHlwZT4NCjxNRVRBIG5hbWU9...
bnQ9Ik1TSFRNTCA4LjAwLjYwMDEuMTg3MDIiPjwvSEVBRD4NCjxCT0RZ...
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq...
KioqKioqPEJSPuOAgOOAgOOAgOOAgOOAgOOAgOOAgOOAgOOAgOS4ieiP...
jO+8peODoeODvOODq+mFjeS/oeOCteODvOODk+OCuTxCUj4qKioqKioq...
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq...
UD4yMDE05bm044CM5LiJ6I+x5p2x5LqsVUZK6YqA6KGM44CN44Gu44K3...
44Ol44Oq44OG44Kj44Gu44Ki44OD44OX44Kw44Os44O844OJ44Gu44Gf...
44Ki44Kr44Km44Oz44OI44Gu5Yip55So5Lit5q2i44KS6YG/44GR44KL...
6Ki844GZ44KL5b+F6KaB44GM44GC44KK44G+44GZ44CCPC9QPg0KPFA+...
44K444KI44KK55m76Yyy44KS57aa44GR44Gm44GP44Gg44GV44GE44CC...
cmVmPSJodHRwOi8vd3d3Lmd6eGluaGFvLmNvbS9waWMvIj5odHRwczov...
Zy5qcC9pYmcvZGZ3L0FQTElOL2xvZ2luaWIvbG9naW4/X1RSQU5JRD1B...
Pg0KPFA+PEJSPuKAleKAlUNvcHlyaWdodChDKTIwMTQgVGhlIEJhbmsg...
aXNoaSBVRkosTHRkLkFsbCByaWdodHMgDQpyZXNlcnZlZOKAleKAlTwv...
RFk+PC9IVE1MPg0K
http://hogehoge.tk/tool/
cmVmPSJodHRwOi8vd3d3Lmd6eGluaGFvLmNvbS9waWMvIj5odHRwczov...
ref="http://www.gzxinhao.com/pic/">https://entry11.bk.muf
**競馬 [#zf569f89]
#ref(spam_keiba.PNG)
# split -b 100000 /var/mail/mail_file_name
# vi xox
From u7rohbcmrd@softbank.ne.jp Tue Mar 4 09:08:00 2014
X-UIDL: kPd"!%g6"!gL5!!Rin!!
Return-Path: <u7rohbcmrd@softbank.ne.jp>
X-Original-To: kuji@smb.net
Delivered-To: kuji@smb.net
Received: from hotshot (localhost [127.0.0.1])
by hotshot.smb.net (Postfix) with ESMTP id C880B...
for <kuji@smb.net>; Tue, 4 Mar 2014 09:08:00 +0...
X-Virus-Scanned: amavisd-new at smb.net
X-Spam-Flag: NO
X-Spam-Score: 7.436
X-Spam-Level: *******
X-Spam-Status: No, score=7.436 tagged_above=5.31 require...
BAYES_60=1.5, FROM_BLANK_NAME=0.723, HK_RANDOM_E...
MISSING_MID=0.497, RAZOR2_CF_RANGE_51_100=0.5,
RAZOR2_CF_RANGE_E8_51_100=1.886, RAZOR2_CHECK=0....
RCVD_IN_BL_SPAMCOP_NET=1.347, RCVD_IN_PSBL=2.7, ...
RCVD_IN_XBL=0.375, URIBL_BLACK=1.725, URIBL_DBL_...
URIBL_JP_SURBL=1.25] autolearn=spam
Received: from hotshot.smb.net ([127.0.0.1])
by hotshot (hotshot.smb.net [127.0.0.1]) (amavis...
with ESMTP id Fix98TELg_bn for <kuji@smb.net>;
Tue, 4 Mar 2014 09:07:38 +0900 (JST)
Received: from gwkits.novrdu.so-ups.ru (gwkits.novrdu.so...
by hotshot.smb.net (Postfix) with SMTP id 8410C1...
for <kuji@smb.net>; Tue, 4 Mar 2014 09:07:32 +0...
From: "" <ib0ry6v9pp@ezweb.ne.jp>
To: kuji@smb.net
Subject: =?ISO-2022-JP?B?GyRCNiVHTyRLNj1MIyQsJEokKyRDJD8...
Date: Tue, 04 Mar 2014 09:07:25 +0900
X-Info:kuji@smb.net
MIME-Version: 1.0
Content-Type: text/plain; charset="Shift_JIS"
List-Id: 8
Status: RO
\x8d\xa1\x82\xdc\x82\xc5\x8b\xa3\x94n\x82\xc5\x8f\x9f\x8...
x82\xa9\x82\xc1\x82\xbd\x82\xa0\x82\xc8\x82\xbd\x82\xc9\...
http://luckyking.asia/uww/
\x93\x96\x8e\xd0\x82\xc5\x82\xcd\x91\xbc\x82\xcc\x8dU\x9...
a7\x82\xb5\x82\xc4\x82\xa2\x82\xdc\x82\xb7\x81B
\x91\xbc\x82\xcc\x89\xef\x8e\xd0\x82\xcd\x82P\x82O\x82O\...
x96\xb2\x82\xcc\x82\xa0\x82\xe9\x94\x83\x82\xa2\x95\xfb\...
\x82\xcd\x82\xc1\x82\xab\x82\xe8\x8c\xbe\x82\xc1\x82\xc4...
\x82\xc4\x82\xb5\x82\xdc\x82\xa2\x82\xdc\x82\xb7\x81B
\x82\xbb\x82\xcc\x83\x8c\x81[\x83X\x82\xb2\x82\xc6\x82\x...
\x83o\x81[\x82\xc5\x82\xab\x82\xe9\x94\x83\x82\xa2\x95\x...
\x82\xa2\x82\xdc\x82\xb7\x81B
\x93\x96\x8e\xd0\x82\xaa\x8d\xc5\x82\xe0\x8fd\x93_\x82\x...
\xb5\x91\xe5\x82\xab\x82\xad\x8f\x9f\x82\xbf\x82\xbd\x82...
\x8e\xd0\x82\xcc\x94{\x82\xc9\x82\xb7\x82\xe9\x82\xc8\x8...
\x82\xdc\x82\xbd\x81A\x8e\x91\x8b\xe0\x82\xcc\x82\xc8\x8...
2\xc8\x82\xc7\x82\xb5\x82\xc4\x82\xad\x82\xbe\x82\xb3\x8...
\x81\xa6\x95K\x82\xb8\x94\x83\x82\xa2\x96\xda\x82\xcc\x8...
2\xa2\x81I\x81I\x8a\xfa\x91\xd2\x92l\x82\xf0\x8cv\x8eZ\x...
\x82\xe9\x82\xcc\x82\xc5\x81A\x82\xbb\x82\xea\x82\xc5\x8...
\x93\x96\x8e\xd0\x82\xc9\x82\xcd\x96\xb3\x97\xbf\x8f\xee...
\xc5\x82\xab\x82\xdc\x82\xb7\x81\xa6\x89\xef\x88\xf5\x93...
\x83\x8c\x83X\x82\xc5\x91\xe5\x8f\xe4\x95v\x82\xc5\x82\x...
\x82\xc6\x82\xe8\x82\xa0\x82\xa6\x82\xb8\x89\xef\x88\xf5...
\xb8\x82\xc9\x89{\x97\x97\x82\xb5\x82\xc4\x93\x96\x8e\xd...
\x82\xc9\x82\xc8\x82\xc1\x82\xc4\x94[\x93\xbe\x82\xb3\x8...
\x94n\x8c\x94\x82\xf0\x8dw\x93\xfc\x82\xb7\x82\xe9\x82\x...
http://luckyking.asia/uww/
\x83\x81\x83\x8b\x83}\x83K\x89\xf0\x8f\x9c\x82\xcd\x82\x...
mail_stop99@yahoo.co.jp
\x81u\x89\xf0\x8f\x9c\x81v\x81u\x92\xe2\x8e~\x81v\x82\xc...
82\xb2\x95\xd4\x90M\x89\xba\x82\xb3\x82\xa2\x81B
----
Total access &counter(total);:本日 &counter(today);:昨...
#counter([total|today|yesterday]);
終了行:
CONTENTS
#contents
----
Lastmodified &lastmod;
----
*postfix body_checks [#sea02ec9]
echo -n ?”削除したい文字列?” | nkf -MB >> /usr/local/etc...
というEUCなファイルに、実行権を与えてPuttyで実行。追加に...
/^P6HJW8Xquca81F0gpM+kuz+hyQ==/ DISCAD
の様に整形。
*正規表現・ルールのTips [#ja727ce6]
【保存版】正規表現でエスケープが必要な文字一覧表
https://qiita.com/katsukii/items/1c1550f064b4686c04d4
正規表現: 文字クラス [ ] 内でエスケープしなくてもよい記号
https://techracho.bpsinc.jp/hachi8833/2017_05_30/40673
*postfix body_checks 一行スパム編 [#ja7f6100]
お世話になっている「正規表現チェッカー 」 http://okumocc...
なんだか、最近増えてきた、「一行スパム」。短い英文とURLだ...
一行だけのメールは、例えば日本語Mailmanの入会通知だったり...
取り敢えず、手元の「一行スパム」を見てみると、最短のものは
http://leapt.vslhnzlf.com/
で、半角26文字。一方、長めのは、
http://extrapolate.smarthealingcompany.com/ Time for won...
で、86文字ほど。
文字数だけの判定だと、
/^.{25,90}$/
でもいいけど、2バイト文字でもヒットしてしまうので、半角英...
/^[0-9a-zA-Z:.\/\s\'\?]{25,100}$/
これで、1行スパムの
Choose the best stimulant http://finch.familyhealthquali...
とかにはマッチするが、Mailman日本語の、
何処誰男 <********@gmail.com> さんが ABC に入会しました.
とかは、スルー。
*postfix body_checks [#t19d828c]
/usr/local/etc/postfix/main.cf
header_checks = regexp:/usr/local/etc/postfix/header_che...
body_checks = regexp:/usr/local/etc/postfix/body_checks
/usr/local/etc/postfix/body_checks
#http://centos.server-manual.com/centos5_postfix_header_...
#/^(|[^>].*)glsandoras@gmail/ REJECT
/glsandoras@gmail/ REJECT
/^glsandoras@gmail/ REJECT
/Blockbuster/ REJECT
/Biostem/ REJECT
/info@platina-1ine/ REJECT
# cat /var/log/maillog | grep reject
# cat /var/log/maillog | grep 'reject: body'
** 注意というかなんちゅうか [#m047d161]
全文英文のスパムメールに、共通する文字列を弾く設定をした...
と、おもったら、ご丁寧に?w 全文英文のメールを、さらにB...
Subject: i'm online
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
SGVsbG8gbXkgZGVhciAtIEkndmUgaGFkIGEgd2ViIGNhbWVyYSB3aXRo...
IHdyaXRlIG1lIC0gYW5kIEknbGwgZG8gd2hhdCB5b3Ugd2FudCBmb3Ig...
bm90IHNlZW4geW91IGluIGEgd2ViIGNhbWVyYS4NCk15IGVtYWlsIGFu...
Ymxlci5ydQ==
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
R3JlZXRpbmdzLCBpdCdzIE1hcmlhIGZyb20gUnVzc2lhISBwbGVhc2Ug...
b3RvcyB3aGVyZSB5b3UgYXJlIG5ha2VkIC0gSSB3YXMgc28gZXhjaXRl...
YXQgbXkgc2l0ZSBpbiB5b3VyIHByb2ZpbGUgLSBhZGRlZCBuZXcgcGlj...
eSBlbWFpbDogYW5ldGFzdTNsbkByYW1ibGVyLnJ1
----
http://s25r.blogspot.jp/2009/02/blog-post_13.html
http://seikatub.xrea.jp/
Message-ID: 20130803.111404249483210239554.babaq@mail-pe...
Date: Sat, 03 Aug 2013 11:16:11 +0900
From: =?x-sjis?B?g3aDiYNgg2mDiYNDg5Mg?=<mail@pedmsvwlpk....
Subject: =?x-sjis?B?jqmR7orHl52Xv4LwlaWCpILMgsUylE6K1IF5...
MIME-Version: 1.0
X-Mail-Agent: BASP21 Pro 1.0.1006.21 B21Soft
Content-Type: text/plain; charset=x-sjis
Content-Transfer-Encoding: base64
X-UIDL: +)%!!mk&!!cp["!E\Q"!
X-EsetId: 5C523B3DCE813A34081565
W4N2g4mDYINpg4mDQ4OTXYLmgugNCoHhgeGB4ZBWkoVNYWlsgfSB4oHi...
vJOIgt2C5oKxKDY0KYF4l2yC5oLoDQqQVpKFg4GBW4OLgvCO85BNgrWC...
DQpbg16DQ4Nng4tdDQqOqZHuiseXnZe/gvCVpYKkgsyCxTKUTorUgXmB...
MDAtgXqC8JWlgqSCzILFjF+W8YK1gsSCrYLqgtyCuYLxgqmBSJTUjYaN...
gsWMZ5HRgtaYQZeNibqCs4KigUINCg0KW5Z7lbZdgaaJe5eXlrOXvw0K...
ZG1zdndscGsuYml6L3BjL3Vzci9pbmRpdmlkdWFsLmFzcD9vdGlkPWVK...
MDEzMDczMTEyMzAzMiZpbT1BMDclNUYyMDEzMDgwMzExMTAxNSZJTkQ9...
CoGlW5azl7+DgYNig1qBW4NXXQ0KaHR0cDovL3BlZG1zdndscGsuYml6...
bmRpdmlkdWFsLmFzcD9vdGlkPWVKeW5GUXR2ZEUyMDEzMDczMTEyMzAz...
NUYyMDEzMDgwMzExMTAxNSZJTkQ9MTAwMDkwDQoNCo7hks6MYpT8jnGX...
l7+QXJC/gXqCqoKygrSCooLcgrWCvYFCjLuN3YFBgreC14LEgsyDVIFb...
U5azl7+CxYKyl5iXcJK4gq+C3IK3gUINCg0KWyCUepBNkuKOfoLNg1KD...
dHA6Ly9wZWRtc3Z3bHBrLmJpei9wYy91c3IvaW5kZXguYXNwP290aWQ9...
RTIwMTMwNzMxMTIzMDMyJmltPUEwNyU1RjIwMTMwODAzMTExMDE1DQqE...
hKqEqoSqhKqEqg0KW4GagqiLcZdsk2+YXo/ulfGBml0NCklEgUYxMDcy...
U1OBRjg1ODANCmFkZHJlc3OBRmt1amlAc21iLm5ldA0KhJ+En4SfhJ+E...
hJ8NCluBmoNUg0ODZ4OBg2qDhYFbgZpdDQqBoIKyi9+PioyfjfUNCmh0...
c3Z3bHBrLmJpei9wYy91c3IvaW5kaXZpZHVhbC5hc3A/b3RpZD1lSnlu...
MzA3MzExMjMwMzImaW09QTA3JTVGMjAxMzA4MDMxMTEwMTUmSU5EPTEw...
oIKyi9+PioyfjfUNCmh0dHA6Ly9wZWRtc3Z3bHBrLmJpei9wYy91c3Iv...
P290aWQ9ZUp5bkZRdHZkRTIwMTMwNzMxMTIzMDMyJmltPUEwNyU1RjIw...
MDE1DQoNCoGgluKCoo2Hgu2CuQ0KaW5mb0BwbGF0aW5hLTFpbmUuY29t...
n4SfhJ+En4SfhJ+Enw0KgXkxOY3OiMiP44LMgt2XmJdwicKBeg0KgXyD...
g0ODk46WlrGLx4F8DQppbmZvQHBsYXRpbmEtMWluZS5jb20NCg0KW4Ga...
tYLEgZpdDQqWe4OBgVuDi4LNl5iXcItLlvGCyZOviNOCs4LqgrKTb5he...
s4LqgsSCooLpgqiLcZdsgsmRzoK1lHqQTYKzgrmCxJK4gqKCxIKoguiC...
grWCvYpvgqaCzILIgqKP6o2Hgs2R5ZXPgqiO6JCUgsWCzYKygrSCooLc...
QYNog4yDWILmguiCsphBl42SuIKvgtyCt4LmgqSCqIrogqKSdoK1gtyC...
DQoNCg0KDQoNCg0KDQqWgIljk/GTZphGlqGQopRZlumJmA==
.
#ref(Line-ID.PNG)
From mqwlljj80260641923253@ezweb.ne.jp Wed Feb 5 19:30...
X-UIDL: cZ^"!FC]"!6na"!U%R!!
Return-Path: <mqwlljj80260641923253@ezweb.ne.jp>
X-Original-To: kuji@smb.net
Delivered-To: kuji@smb.net
Received: from hotshot (localhost [127.0.0.1])
by hotshot.smb.net (Postfix) with ESMTP id F2791...
for <kuji@smb.net>; Wed, 5 Feb 2014 19:30:01 +0...
X-Virus-Scanned: amavisd-new at smb.net
X-Spam-Flag: NO
X-Spam-Score: 11.339
X-Spam-Level: ***********
X-Spam-Status: No, score=11.339 tagged_above=5.31 requir...
tests=[AM.WBL=-9, BAYES_99=3.5, FORGED_MUA_IMS=1...
FROM_LOCAL_DIGITS=0.001, FROM_LOCAL_HEX=0.006, M...
RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_5...
RAZOR2_CHECK=0.922, RCVD_IN_BL_SPAMCOP_NET=1.347,
RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_RP_RNBL=1.31,
RCVD_IN_SORBS_HTTP=0.001, RCVD_IN_SORBS_SOCKS=1....
RCVD_IN_XBL=0.375, URIBL_BLACK=1.725, URIBL_DBL_...
URIBL_JP_SURBL=1.25] autolearn=spam
Received: from hotshot.smb.net ([127.0.0.1])
by hotshot (hotshot.smb.net [127.0.0.1]) (amavis...
with ESMTP id owAK4op4BxPO for <kuji@smb.net>;
Wed, 5 Feb 2014 19:29:44 +0900 (JST)
Received: from ssh.support-maintenance.com (ssh.support-...
by hotshot.smb.net (Postfix) with SMTP id C819A1...
for <kuji@smb.net>; Wed, 5 Feb 2014 19:29:38 +0...
Received: from 32.56.111.192 by ssh.support-maintenance....
From: "=?ISO-2022-JP?B?GyRCRExPQyUiJVclajQwQTRCUDF+ISobK...
To: kuji@smb.net
Subject: =?ISO-2022-JP?B?TElORS1JRBskQjdHPChIRCQrJGkkTiQ...
Date:Fri, 07 Feb 2014 13:26:13 +0300
X-Mailer: Internet Mail Service (5.5.2650.21)
MIME-Version: 1.0
Content-Type: text/plain; charset="SHIFT_JIS"
Content-Transfer-Encoding: 7bit
Status: RO
\x82\xa8\x97F\x92B\x90\\x90\xbf\x82\xaa1\x8c\x8f\x93\xcd...
\x81@
\x81\xa5\x89\xba\x8bLURL\x82\xa9\x82\xe7\x82\xb2\x8am\x9...
http://b2cxh42if9.asia
\x81@
\x81@
\x81\xa6LINE-ID\x8cf\x8e\xa6\x94\xc2\x82\xcc\x82\xb2\x97...
82\xb7\x82\xcc\x82\xc5\x88\xc0\x90S\x82\xb5\x82\xc4\x82\...
#ref(Line-ID2.PNG)
From trbdeeu86405758986@ezweb.ne.jp Mon Feb 10 11:40:35...
X-UIDL: E!X!!EMi"!DeT"!G`["!
Return-Path: <trbdeeu86405758986@ezweb.ne.jp>
X-Original-To: kuji@smb.net
Delivered-To: kuji@smb.net
Received: from hotshot (localhost [127.0.0.1])
by hotshot.smb.net (Postfix) with ESMTP id E53BE...
for <kuji@smb.net>; Mon, 10 Feb 2014 11:40:34 +0...
X-Virus-Scanned: amavisd-new at smb.net
X-Spam-Flag: NO
X-Spam-Score: 8.842
X-Spam-Level: ********
X-Spam-Status: No, score=8.842 tagged_above=5.31 require...
BAYES_99=3.5, DATE_IN_FUTURE_24_48=2.048, FH_FAK...
FORGED_MUA_OUTLOOK=1.927, MISSING_MID=0.497,
RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_5...
RAZOR2_CHECK=0.922, RCVD_DOUBLE_IP_SPAM=1.808, T...
URIBL_BLACK=1.725, URIBL_JP_SURBL=1.25] autolear...
Received: from hotshot.smb.net ([127.0.0.1])
by hotshot (hotshot.smb.net [127.0.0.1]) (amavis...
with ESMTP id vGjnJlDx33FD for <kuji@smb.net>;
Mon, 10 Feb 2014 11:40:16 +0900 (JST)
Received: from stiba.net (stiba.net [192.241.235.132])
by hotshot.smb.net (Postfix) with SMTP id 284E31...
for <kuji@smb.net>; Mon, 10 Feb 2014 11:40:15 +0...
Received: from 80.227.86.252 by 192.241.235.132; Wed, 12...
From: "=?ISO-2022-JP?B?GyRCIiE0MEE0TDVOQSEqGyhCTElORSgbJ...
To: kuji@smb.net
Subject: =?ISO-2022-JP?B?TElORSgbJEIlaSUkJXMbKEIpSUQbJEI...
Date:Wed, 12 Feb 2014 01:37:34 -0100
X-Mailer: Microsoft Outlook, Build 10.0.2616
MIME-Version: 1.0
Content-Type: text/plain; charset="SHIFT_JIS"
Content-Transfer-Encoding: 7bit
Status: RO
\x8f\xb3\x94F\x91\xd2\x82\xbf\x82\xcc\x97F\x90l\x82\xaa2...
\x81@
\x81\xa5\x8d\xa1\x82\xb7\x82\xae\x8f\xb3\x94F\x82\xb7\x8...
http://m2nwock12v.asia
\x81@
\x81@
\x81\xa6LINE(\x83\x89\x83C\x83\x93)ID\x8cf\x8e\xa6\x94\x...
\xa8\x82\xe8\x82\xdc\x82\xb7\x81B
**本文(body)の共通部分 [#z0d3b5cf]
\x81\xa6LINE
-
ID\x8cf\x8e\xa6\x94\xc2\x82\xcc\x82\xb2\x97\x98\x97p\x82...
\x82\xcc\x82\xc5\x88\xc0\x90S\x82\xb5\x82\xc4\x82\xb2\x9...
\x81\xa6LINE
(\x83\x89\x83C\x83\x93)
ID\x8cf\x8e\xa6\x94\xc2\x82\xcc\x82\xb2\x97\x98\x97p\x82...
\x81B
***body_checks [#o6e28cc7]
#/^\\x81\\xa6LINE/ REJECT
/ID\\x8cf\\x8e\\xa6\\x94\\xc2\\x82\\xcc\\x82\\xb2\\x97\\...
#.*2.*3.*|.*3.*2.* 2と3が両方使っているものを抜き出し
#/^\\x81\\xa6LINE|ID\\x8cf\\x8e\\xa6\\x94\\xc2\\x82\\xcc...
***header_checks に複数の拡張子を一行で記載する例 [#af9b4...
http://www.itmedia.co.jp/help/tips/linux/l0530.html
** mailの生データを見る [#o5d20138]
mail の2バイト文字の生データを見る際、通常のテキストエデ...
しかし、それではbody_checksなどのフィルターには使えないデ...
で、vi の登場である。
しかしながら、ファイルが大きい場合は、なにかと取り回しが...
ファイルの分割には、split コマンドをつかってみる。
split (option) [source file] (prefix)
オプション
オプション 機能
.-b 指定したバイト数で分割
.キロバイトは末尾に「k」、メガバイトは末尾に「m」を付ける
.-l 指定した行数ごとに分割
コマンド例
-split -b 100k file1 file1を100KBごとに分割
-split -l 1000 file2 file2を1000行ずつに分割
-split -b 1m file* test 名前がfileで始まるファイルを1MBご...
# split -b 1000000 file
# split -b 100000 xcb
などを繰り返して、適当なファイルサイズになったところで、
# vi xah
とかすると、スパムメールの文字データが見えるようになる
メール本文の文字列は、
#ref(spam.PNG)
こちらが生データ
Subject: =?ISO-2022-JP?B?TElORSgbJEIlaSUkJXMbKEIpGyRCJCs...
Date:Sat, 22 Feb 2014 02:30:56 -0100
X-Mailer: Internet Mail Service (5.5.2650.21)
MIME-Version: 1.0
Content-Type: text/plain; charset="SHIFT_JIS"
Content-Transfer-Encoding: 7bit
Status: RO
^[$B$"$N^[(BID^[$B7G<(HD$,!*BgI}%j%K%e!<%"%k$7$F?k$KI|3h...
^[$B:G?75!G=$,B??tDI2C$5$l!"99$K;H$$$d$9$/$J$j$^$7$?!*!*...
^[$B!!^[(B
^[$B"'?7$7$/$J$C$?^[(BID^[$B7G<(HD$O%3%A%i!*"'^[(B
http://sa8xtrudxo.asia
^[$B!!^[(B
^[$B!!^[(B
ID^[$B7G<(HD$O!"9qFb:GBg5i!"=q$-9~$_?t^[(BNo.1^[$B$NM'C#...
^[$B?7$7$/$J$C$?8!:w5!G=$r;H$C$FBt;3$NM'C#$H7R$,$m$&!*^[(B
**UFJ [#h6713173]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional...
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Cont...
<META name=GENERATOR content="MSHTML 8.00.6001.18702"></...
<BODY>
<P>*****************************************************...
<P>2014年「三菱東京UFJ銀行」のシステムセキュリティのアッ...
<P>以下のページより登録を続けてください。</P>
<P><A
href="http://www.gzxinhao.com/pic/">https://entry11.bk.m...
<P><BR>――Copyright(C)2014 The Bank of Tokyo-Mitsubishi U...
reserved――</P>
<P></P></BODY></HTML>
PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQu...
L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9o...
Zi04IiBodHRwLWVxdWl2PUNvbnRlbnQtVHlwZT4NCjxNRVRBIG5hbWU9...
bnQ9Ik1TSFRNTCA4LjAwLjYwMDEuMTg3MDIiPjwvSEVBRD4NCjxCT0RZ...
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq...
KioqKioqPEJSPuOAgOOAgOOAgOOAgOOAgOOAgOOAgOOAgOOAgOS4ieiP...
jO+8peODoeODvOODq+mFjeS/oeOCteODvOODk+OCuTxCUj4qKioqKioq...
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq...
UD4yMDE05bm044CM5LiJ6I+x5p2x5LqsVUZK6YqA6KGM44CN44Gu44K3...
44Ol44Oq44OG44Kj44Gu44Ki44OD44OX44Kw44Os44O844OJ44Gu44Gf...
44Ki44Kr44Km44Oz44OI44Gu5Yip55So5Lit5q2i44KS6YG/44GR44KL...
6Ki844GZ44KL5b+F6KaB44GM44GC44KK44G+44GZ44CCPC9QPg0KPFA+...
44K444KI44KK55m76Yyy44KS57aa44GR44Gm44GP44Gg44GV44GE44CC...
cmVmPSJodHRwOi8vd3d3Lmd6eGluaGFvLmNvbS9waWMvIj5odHRwczov...
Zy5qcC9pYmcvZGZ3L0FQTElOL2xvZ2luaWIvbG9naW4/X1RSQU5JRD1B...
Pg0KPFA+PEJSPuKAleKAlUNvcHlyaWdodChDKTIwMTQgVGhlIEJhbmsg...
aXNoaSBVRkosTHRkLkFsbCByaWdodHMgDQpyZXNlcnZlZOKAleKAlTwv...
RFk+PC9IVE1MPg0K
http://hogehoge.tk/tool/
cmVmPSJodHRwOi8vd3d3Lmd6eGluaGFvLmNvbS9waWMvIj5odHRwczov...
ref="http://www.gzxinhao.com/pic/">https://entry11.bk.muf
**競馬 [#zf569f89]
#ref(spam_keiba.PNG)
# split -b 100000 /var/mail/mail_file_name
# vi xox
From u7rohbcmrd@softbank.ne.jp Tue Mar 4 09:08:00 2014
X-UIDL: kPd"!%g6"!gL5!!Rin!!
Return-Path: <u7rohbcmrd@softbank.ne.jp>
X-Original-To: kuji@smb.net
Delivered-To: kuji@smb.net
Received: from hotshot (localhost [127.0.0.1])
by hotshot.smb.net (Postfix) with ESMTP id C880B...
for <kuji@smb.net>; Tue, 4 Mar 2014 09:08:00 +0...
X-Virus-Scanned: amavisd-new at smb.net
X-Spam-Flag: NO
X-Spam-Score: 7.436
X-Spam-Level: *******
X-Spam-Status: No, score=7.436 tagged_above=5.31 require...
BAYES_60=1.5, FROM_BLANK_NAME=0.723, HK_RANDOM_E...
MISSING_MID=0.497, RAZOR2_CF_RANGE_51_100=0.5,
RAZOR2_CF_RANGE_E8_51_100=1.886, RAZOR2_CHECK=0....
RCVD_IN_BL_SPAMCOP_NET=1.347, RCVD_IN_PSBL=2.7, ...
RCVD_IN_XBL=0.375, URIBL_BLACK=1.725, URIBL_DBL_...
URIBL_JP_SURBL=1.25] autolearn=spam
Received: from hotshot.smb.net ([127.0.0.1])
by hotshot (hotshot.smb.net [127.0.0.1]) (amavis...
with ESMTP id Fix98TELg_bn for <kuji@smb.net>;
Tue, 4 Mar 2014 09:07:38 +0900 (JST)
Received: from gwkits.novrdu.so-ups.ru (gwkits.novrdu.so...
by hotshot.smb.net (Postfix) with SMTP id 8410C1...
for <kuji@smb.net>; Tue, 4 Mar 2014 09:07:32 +0...
From: "" <ib0ry6v9pp@ezweb.ne.jp>
To: kuji@smb.net
Subject: =?ISO-2022-JP?B?GyRCNiVHTyRLNj1MIyQsJEokKyRDJD8...
Date: Tue, 04 Mar 2014 09:07:25 +0900
X-Info:kuji@smb.net
MIME-Version: 1.0
Content-Type: text/plain; charset="Shift_JIS"
List-Id: 8
Status: RO
\x8d\xa1\x82\xdc\x82\xc5\x8b\xa3\x94n\x82\xc5\x8f\x9f\x8...
x82\xa9\x82\xc1\x82\xbd\x82\xa0\x82\xc8\x82\xbd\x82\xc9\...
http://luckyking.asia/uww/
\x93\x96\x8e\xd0\x82\xc5\x82\xcd\x91\xbc\x82\xcc\x8dU\x9...
a7\x82\xb5\x82\xc4\x82\xa2\x82\xdc\x82\xb7\x81B
\x91\xbc\x82\xcc\x89\xef\x8e\xd0\x82\xcd\x82P\x82O\x82O\...
x96\xb2\x82\xcc\x82\xa0\x82\xe9\x94\x83\x82\xa2\x95\xfb\...
\x82\xcd\x82\xc1\x82\xab\x82\xe8\x8c\xbe\x82\xc1\x82\xc4...
\x82\xc4\x82\xb5\x82\xdc\x82\xa2\x82\xdc\x82\xb7\x81B
\x82\xbb\x82\xcc\x83\x8c\x81[\x83X\x82\xb2\x82\xc6\x82\x...
\x83o\x81[\x82\xc5\x82\xab\x82\xe9\x94\x83\x82\xa2\x95\x...
\x82\xa2\x82\xdc\x82\xb7\x81B
\x93\x96\x8e\xd0\x82\xaa\x8d\xc5\x82\xe0\x8fd\x93_\x82\x...
\xb5\x91\xe5\x82\xab\x82\xad\x8f\x9f\x82\xbf\x82\xbd\x82...
\x8e\xd0\x82\xcc\x94{\x82\xc9\x82\xb7\x82\xe9\x82\xc8\x8...
\x82\xdc\x82\xbd\x81A\x8e\x91\x8b\xe0\x82\xcc\x82\xc8\x8...
2\xc8\x82\xc7\x82\xb5\x82\xc4\x82\xad\x82\xbe\x82\xb3\x8...
\x81\xa6\x95K\x82\xb8\x94\x83\x82\xa2\x96\xda\x82\xcc\x8...
2\xa2\x81I\x81I\x8a\xfa\x91\xd2\x92l\x82\xf0\x8cv\x8eZ\x...
\x82\xe9\x82\xcc\x82\xc5\x81A\x82\xbb\x82\xea\x82\xc5\x8...
\x93\x96\x8e\xd0\x82\xc9\x82\xcd\x96\xb3\x97\xbf\x8f\xee...
\xc5\x82\xab\x82\xdc\x82\xb7\x81\xa6\x89\xef\x88\xf5\x93...
\x83\x8c\x83X\x82\xc5\x91\xe5\x8f\xe4\x95v\x82\xc5\x82\x...
\x82\xc6\x82\xe8\x82\xa0\x82\xa6\x82\xb8\x89\xef\x88\xf5...
\xb8\x82\xc9\x89{\x97\x97\x82\xb5\x82\xc4\x93\x96\x8e\xd...
\x82\xc9\x82\xc8\x82\xc1\x82\xc4\x94[\x93\xbe\x82\xb3\x8...
\x94n\x8c\x94\x82\xf0\x8dw\x93\xfc\x82\xb7\x82\xe9\x82\x...
http://luckyking.asia/uww/
\x83\x81\x83\x8b\x83}\x83K\x89\xf0\x8f\x9c\x82\xcd\x82\x...
mail_stop99@yahoo.co.jp
\x81u\x89\xf0\x8f\x9c\x81v\x81u\x92\xe2\x8e~\x81v\x82\xc...
82\xb2\x95\xd4\x90M\x89\xba\x82\xb3\x82\xa2\x81B
----
Total access &counter(total);:本日 &counter(today);:昨...
#counter([total|today|yesterday]);
ページ名: