Mick: > I thought header checks were carried out after all the other smtp > restrictions had passed therefore I didn't see the harm in an 'OK' for a > message header at this stage.
Correct, but the OK action applies only to that header, not the message. The Postfix 3.2 PASS action applies to the message, but remains unused when a REJECT pattern is matched earlier. Wietse