Erik de Castro Lopo <[email protected]> writes:

> I'm messing postfix-pcre version 2.6.5-3 from Debian testing. In the
> /etc/postfix/pcre_table I have the following rule:

[...]

> However, even with all the above, I'm still getting emails with 'casino' in
> the subject line.  Anybody have any idea why PCRE is only working with
> postfix some of the time?

IIRC, header_checks see only raw headers, so anything encoded with RFC 2047
syntax might look nothing like that.  For example, 2047 base-64 encoded
headers seem popular in spam, and those could contain 'casino' without,
y'know, containing 'casino'.

        Daniel

I suggest you use something like amavisd-new which pushes the email through
all the relevant normalization before it applies rules like that.

-- 
✣ Daniel Pittman            ✉ [email protected]            ☎ +61 401 155 707
               ♽ made with 100 percent post-consumer electrons
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to