Erik de Castro Lopo put forth on 3/7/2011 4:50 PM: > Given the above data, I think I am justified in using the following > pcre rule: > > /^Received-SPF:.*helo=[a-z0-9.-]+\.mail\....\.yahoo\.com; > envelope-from=[^@]+@att.net/i REJECT
This is possibly less complex, totally effective, and provides an alternate path for any legit email that's rejected. /etc/postfix/blacklist .. yahoo.com REJECT Please resend to postmas...@mydomain.tld if your email is not spam. .. smtpd_recipient_restrictions = ... check_reverse_client_hostname_access hash:/etc/postfix/blacklist check_sender_access hash:/etc/postfix/blacklist ... In something like 3 years since implementing this, I've not received a single Yahoo email in my postmaster mailbox. I of course manually whitelisted some friends/family addresses, and my auto whitelist script handles yahoo addresses for folks I send mail to. -- Stan