On Wed, May 18, 2011 at 11:07 AM, Noel Jones <njo...@megan.vbhcs.org> wrote: > On 5/18/2011 8:54 AM, Steve wrote: >> >> -------- Original-Nachricht -------- >>> >>> Datum: Wed, 18 May 2011 08:49:25 -0500 >>> Von: Noel Jones<njo...@megan.vbhcs.org> >>> An: postfix-users@postfix.org >>> Betreff: Re: Filtering spam with a partial pattern >> >>> On 5/18/2011 8:06 AM, Lima Union wrote: >>>> >>>> Hi all! i'm seeing a huge quantity of spam during this week (~156K >>>> messages) all from an smtp addresses that begins with '0-', like: >>>> >>>> from=<0...@cancer.org> >>>> from=<0-1z3ize-...@bxbmail.de> >>>> from=<0...@carnival.com> >>>> from=<0-gentil...@aditi.com> >>>> from=<0-happy-1...@msf.biglobe.ne.jp> >>>> from=<0-downl...@soundviewmortgage.com> >>>> >>>> I tried to reject them by writing a simple rule in my >>>> smtpd_sender_checks by simply appending 0- at the beginning of a new >>>> line but for some reason it isn't matching the pattern, finally >>>> getting rejected by my RBL provider. Anyway I want to avoid doing RBL >>>> checks for this case, any ideas why my rule isn't working? any >>>> suggetions on how to write a filter for this pattern? >>> >>> Add to your smtpd_sender_checks.regexp file: >>> >>> /^0-/ REJECT invalid sender address >>> >> Should that not be: >> /^0\-/ REJECT invalid sender address > > > Not necessary. The "-" is not special outside character classes. > > > -- Noel Jones >
One last question regarding this, due that the amount of spam is huge I'd like to catch some of these messages, how should I configure Postfix in order to let this kind of messages (beginning with /^0-/ ) bypass all my checks (RBL,etc) and redirect them to my account to review them? is this possible? Thanks once again.
