Rich Shepard: > The Postfix book tells me that using the WARN option on a restriction > (such as in the /etc/postfix/header_checks file) logs the warning while > delivering the message. However, there is apparently no marking of the > message so it's clearly identified as one that tripped that warning. > > I want to examine delivered messages that contain > "Content-Transfer-Encoding: base64" in the header. Adding that string to the > header_checks file with a WARN option does not explicitly identify those > messages.
Perhaps "warn" is not the right concept for inspecting mail. Options more directly related to mail inspection would be: hold Freeze the mail in the queue until acted upon. filter Divert the message into some external program. filter has its own documentation, FILTER_README, also on-line as http://www.postfix.org/FILTER_README.html. > Use of the warn action is not giving me the results I want. How should I > be doing this? Alternatively, if I use the HOLD option instead, where are > those messages held until I can examine them? Frozen mail can be inspected with "postcat -q queueid", or deleted/requeued with the "postsuper" command. Wietse
