I haven't played with header checks yet, so think about this before blindly trying it, but: aren't header checks case insensitive? In which case that rule matches and rejects all the messages coming through recently with "advise" somewhere in the subject. If its purpose is to block subjects starting with "ADV:", maybe replace the ".*" between subject and adv with "[[:space]]*" or "\s*" (posix/pcre), or check for "adv:", or at least exclude "advi".
But then again, I've never seen a piece of spam that actually bothered starting with "ADV:", so I'd question the effectiveness of the rule in the first place. Just a thought, Evan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Don Weber Sent: Saturday, 4 January 2003 06:55 To: [EMAIL PROTECTED] Subject: [IMGate] Re: Fwd: Bounced message for 'imgate' WTF is this? someone is using the header_check that are listed on the postfix site here's the check /^Subject: .*ADV/!/.*Advisory/ REJECT # This exclude fixes BugTraq Advisories don
