Further investigation demonstrate that my spams are signed correctly with DKIM. So I will attack another angle : NIKER LES SPAMMEURS ALA RACINE🔥 🔥 🔥 🔥 🔥 🔥
Currently regrouping the pieces of shit, and export it and we will play few grep and stuff to extract some interesting information
Extract from mail text sources (.eml) IP address
grep -rhoP 'Received: from .+' . | sed "s/.*\[\(.\+\)\].*/\1/" | sort | uniq
I'm a french guy alone here.