The Postfix book tells me that using the WARN option on a restriction (such as in the /etc/postfix/header_checks file) logs the warning while delivering the message. However, there is apparently no marking of the message so it's clearly identified as one that tripped that warning.
I want to examine delivered messages that contain "Content-Transfer-Encoding: base64" in the header. Adding that string to the header_checks file with a WARN option does not explicitly identify those messages. Use of the warn action is not giving me the results I want. How should I be doing this? Alternatively, if I use the HOLD option instead, where are those messages held until I can examine them? Rich
