Erik de Castro Lopo <[email protected]> writes:
> I'm messing postfix-pcre version 2.6.5-3 from Debian testing. In the
> /etc/postfix/pcre_table I have the following rule:
[...]
> However, even with all the above, I'm still getting emails with 'casino' in
> the subject line. Anybody have any idea why PCRE is only working with
> postfix some of the time?
IIRC, header_checks see only raw headers, so anything encoded with RFC 2047
syntax might look nothing like that. For example, 2047 base-64 encoded
headers seem popular in spam, and those could contain 'casino' without,
y'know, containing 'casino'.
Daniel
I suggest you use something like amavisd-new which pushes the email through
all the relevant normalization before it applies rules like that.
--
✣ Daniel Pittman ✉ [email protected] ☎ +61 401 155 707
♽ made with 100 percent post-consumer electrons
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html