* Marcello Coutinho <marcellocouti...@gmail.com>:
> some lines from header_check file:
> 
> /^from:.*root@/ REJECT [SN046]
> /^from:.*anonymous@*/ REJECT [SN047]
> /^from:.*@ajufe.org.br/ OK
> /^from:/ HOLD

These match headers 

> Dec  7 16:57:03 srvchunk01 postfix/cleanup[42501]: 2E1DB2111FE:
> warning: header Subject: fw:Financiamento aprovado Volkswagen Leasing.
> from li389-50.members.linode.com[106.187.46.50];
> from=<r...@li389-50.members.linode.com>
  ^^^^ this is the ENVELOPE (not the header FROM)

Use 
/^from:/ WARN
to see the actual headers. You might want to use "check_sender_access"
instead, judging from your example.

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | http://www.charite.de
            

Reply via email to