On 5/6/2010 8:28 AM, Larry Stone wrote:
On Thu, 6 May 2010, J.D. Bronson wrote:
I am seeing random spam come in with this consistent type of 'from':
(r...@www.cheapquotesonline.com)
(r...@chat.biznizpro.com)
(r...@safetyaboutonline.net)
..they all begin with 'ret@' and I need some help creating a
header_check (and/or body check) to catch this.
I dealt with that a long time ago. You'll find (assuming this is the
same spammer I see) that the r...@... is also the envelope sender. So
just put it in sender_checks. What I have there is:
ret@ 554 Server policy rejection
(question for our experts: is 554 an acceptable reject code there?)
Yes, "554 text" is acceptable.
However, note that
ret@ 554
is the same as OK (an all numeric response is treated as OK).
I think using REJECT is safer and less likely to present a
surprise.
http://www.postfix.org/access.5.html
-- Noel Jones
