>>I haven't played with header checks yet, so think about this before
blindly
>>trying it, but: aren't header checks case insensitive?
>
>negatory

Hmm, just checked the man pages for regexp_table and pcre_table: "By
default, matching is case-insensitive, although following the second slash
with an `i' flag will  reverse  this." I'm running Postfix 1.1.11 here
(Debian 3.0-stable package) so it might have changed since then, but that'd
be a pretty major change to make. So yeah, I still think that ADV block Don
posted is a bit too likely to grab legit mail.



>>, so I'd question the effectiveness of the rule in the
>>first place.
>
>it's effective, do it.
>
>/^Subject:.*(       |\.\.\.\.\.\.|\. \. \. \.|-\-\-\-\-|_____)/ REJECT
>/^Subject:.*(a d v|adv\:|adv\])/ REJECT
>/^Subject:.*(teensex|suck|clit|hgh|viagra|penis|cum |Phentermine|Viagra)/
>REJECT
>
>Len

We only commissioned the IMGate box on Monday, so it's being broken in at
the moment. So far it's blocking around 12% of incoming mail, with only 2
false positives to date (one using a questionable list host, one coming
through an open relay). Seriously impressive stuff. :D I'm waiting until
people come back off leave and we get a more typical legitimate mail flow,
then I'll start putting in a few header and body checks with WARN to see
what happens.

Evan


Reply via email to