fairly new at trying a scaled postfix install, so i assume it is my lack
of clue.  trying to use milter_header_checks to reject all marked spam
on debian 12 running `mail_version = 3.7.11`

    milter_header_checks = regexp:/etc/postfix/milter_header_checks

with

    # cat /etc/postfix/milter_header_checks
    /^X-Spam.*YES/i REJECT

seems to let marked headers thhrough to be caught by a procmail filter
on the final destination host.

    imaphost:/home/randy> egrep -aci "^X-Spam.*YES" mail/newspam
    61

and i do not think i am hitting 

    This feature is not supported with smtp header/body checks.

from

    https://www.postfix.org/header_checks.5.html 's
    REJECT optional text clause

though perhaps `smtpd_recipient_restrictions` is in that conflict set.
i am not at all clear on this.  heck, i am not clear on much :)

and pro forma

    # postconf -n
    alias_maps =
    append_dot_mydomain = no
    best_mx_transport = smtp:[psg.com]
    biff = no
    compatibility_level = 3.6
    delay_warning_time = 4h
    inet_interfaces = all
    inet_protocols = all
    mailbox_size_limit = 0
    milter_default_action = accept
    milter_header_checks = regexp:/etc/postfix/milter_header_checks
    milter_mail_macros = i {mail_addr} {client_addr} {client_name} {auth_authen}
    milter_protocol = 6
    mydestination = $myhostname, m0.rg.net, localhost.rg.net, , localhost
    myhostname = m0.rg.net
    mynetworks = 127.0.0.0/8 [::1]/128 [::ffff:127.0.0.0]/104 [::1]/128 
147.28.0.0/23 198.180.150.0/24 198.180.152.0/24 [2001:418:1::0/64] 
[2001:418:1:8006::0/64] [2001:418:1:3807::0/64] 38.99.102.194 38.108.184.77
    myorigin = /etc/mailname
    non_smtpd_milters = inet:127.0.0.1:11332
    readme_directory = no
    recipient_delimiter = +
    relay_domains = balletpixelle.org, katandmaouche.com, psg.com, rg.net
    relayhost =
    smtp_tls_CApath = /etc/ssl/certs
    smtp_tls_note_starttls_offer = yes
    smtp_tls_protocols = !SSLv2, !SSLv3
    smtp_tls_security_level = may
    smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
    smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
    smtpd_client_connection_count_limit = 12
    smtpd_client_connection_rate_limit = 12
    smtpd_milters = inet:127.0.0.1:11332
    smtpd_recipient_restrictions = permit_mynetworks, 
permit_sasl_authenticated, permit_auth_destination, reject_rbl_client 
zen.spamhaus.org, reject_rhsbl_reverse_client dbl.spamhaus.org, 
reject_rhsbl_helo dbl.spamhaus.org, reject_rhsbl_sender dbl.spamhaus.org
    smtpd_tls_cert_file = /etc/letsencrypt/live/m0.rg.net/fullchain.pem
    smtpd_tls_key_file = /etc/letsencrypt/live/m0.rg.net/privkey.pem
    smtpd_tls_protocols = TLSv1.3, TLSv1.2, !SSLv2, !SSLv3, !TLSv1
    smtpd_tls_security_level = may
    smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
    transport_maps = hash:/etc/postfix/transport
    virtual_alias_maps = regexp:/etc/postfix/virtual.regexp

randy
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to