Juan Manuel P:
> Hello Witse do you mean to use HOLD action on header_checks ?
>
> like this ?
>
> /^Subject:.*hacked*/ HOLD
By the way that "*" at the end is useless.
> And that whats suppose to do ?
>
> It is holded the email on the queue ? and I can check with mailq command ?
> and later detele from queue and email me a alert
Yes, as described in my reply.
Then you can review the email with "postcat -q" and
delete it with "postsuper -d".
> Sorry for ask and not try, because we have only enviroment on producction
> and dont make a misstake on the service.
Then DISCARD should be considered unsafe, as it is irreversible.
HOLD is safer because it can be undone with "postsuper -H".
Wietse
