On Thu, May 06, 2010 at 10:58:01AM +0200, Louis-David Mitterrand wrote: > On Wed, May 05, 2010 at 01:44:54PM -0400, Brian Evans - Postfix > List wrote: > > >> > > > You could try this in /etc/postfis/header_checks > > > > > > if > > > /^(Received|X-((Origin(ating)?|Client|MDRemote|Sender)-?IP|(Client|Remote_)Addr|PHP-Script)):/ > > > if > > > !/^(X-Original-)?To:[...@]*(africanspamlover1|africanspamlover2|etc..)@/ > > > /\b(41\.1(6\d|7[0-5])\.\d+\.\d+)\b/ REJECT african spam rule 1 > > > /\b(41\.3(6\d|7[0-5])\.\d+\.\d+)\b/ REJECT african spam rule 2 > > > .. and all other rules ... > > > endif > > > endif > > > > > This will not work. > > Postfix analyzes headers one at a time. > > You cannot check multiple headers at once in header_checks. > > You need a milter or other filter to do that. > > Could this be entered as a postfix wishlist item then? A 'm' flag
I can't speak for Wietse, but: no. What you're talking about would probably require major restructuring of cleanup(8). As you were told, what you want to do is already possible by means of external content filters and/or milters. I believe you will find Wietse's answer to your wish here: http://www.postfix.org/CONTENT_INSPECTION_README.html -- Offlist mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header