> Sorry if i'm adding more confusion here, but to add to what Cybertime > Hostmaster said, with body checks, Postfix isn't able to reject because of > content from the body_checks if it didn't receive any content.
Correct. Or the more Postfix way to say this is that this happens at the Cleanup stage of the message. If you look at the postfix Anatomy, you will see where this is. For the overall: http://www.postfix.org/big-picture.html Or just receiving: http://www.postfix.org/receiving.html Bill Landry kept referring to the smtpd stage of that same Anatomy, which has already passed once you are in Cleanup. > And the point I was trying to make about the Sobig, was since most messages > were sent from legitate (spoofed) email addresses, that mail, when rejected > gets bounced to a different sender, and simply adds to the traffic problem. Please try to keep it absolutely clear. I would change your wording to: "that mail, when rejected [by the body checks, becomes a] bounced [message] to a different sender" The main issue is that header/body checks use the same terminology as smtpd checks, REJECT. But in header/body checks this is really BOUNCE. I think the logic behind this is code reuse, which keeps Postfix slim. I am not enough of a coder, and very much out of practice, so I can not confirm this guess of mine. --Eric
