At 11:11 AM 10/13/2005, Andy Hester wrote:
Thanks for the info.
Since I really just want to block email with certain words is there a
reason I shouldn't just put some rules in header_checks and body_checks in
postfix?
Would this be better or worse?
If you want to do an unconditional block of all email containing certain
words, doing it in your MTA is definitely better. Of course, unconditional
blocks should be treated with caution. "anal" is a substring of "analog",
so set your blocks up VERY carefully lest you wind up blocking emails
talking about unrelated subjects.
SA is for when you want to tally up scores and only block emails that reach
a threshold. Yes, you can "force" it to block mail by setting the score of
a rule really high, but it's generally more efficient and easier to set
this up at the mta layer.
