>>I haven't played with header checks yet, so think about this before blindly >>trying it, but: aren't header checks case insensitive? > >negatory
Hmm, just checked the man pages for regexp_table and pcre_table: "By default, matching is case-insensitive, although following the second slash with an `i' flag will reverse this." I'm running Postfix 1.1.11 here (Debian 3.0-stable package) so it might have changed since then, but that'd be a pretty major change to make. So yeah, I still think that ADV block Don posted is a bit too likely to grab legit mail. >>, so I'd question the effectiveness of the rule in the >>first place. > >it's effective, do it. > >/^Subject:.*( |\.\.\.\.\.\.|\. \. \. \.|-\-\-\-\-|_____)/ REJECT >/^Subject:.*(a d v|adv\:|adv\])/ REJECT >/^Subject:.*(teensex|suck|clit|hgh|viagra|penis|cum |Phentermine|Viagra)/ >REJECT > >Len We only commissioned the IMGate box on Monday, so it's being broken in at the moment. So far it's blocking around 12% of incoming mail, with only 2 false positives to date (one using a questionable list host, one coming through an open relay). Seriously impressive stuff. :D I'm waiting until people come back off leave and we get a more typical legitimate mail flow, then I'll start putting in a few header and body checks with WARN to see what happens. Evan
