On Thu, Sep 29, 2011 at 06:38:13PM -0600, James Lay wrote: > Hey All! > > Topic says it….I consistently get email from one source that has the date in > the paste….say almost a month. Is there functionality within Postfix to deal > with these, or should I work on a daily script that will modify my head_checks > file or something like that? Thank you. > > James
Here's what I happen to have in my header_checks /^Date: .* 200[0-9]/ REJECT HDR9000 Spam Header Past Date 1 /^Date: .* 19[0-9][0-9]/ REJECT HDR9010 Spam Header Past Date 2 /^Date: .* 20[2-9][0-9]/ REJECT HDR9020 Date header is in the distant future /^Date: .* 2010/ REJECT HDR9030 Date header is from last year /^Date: .* (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep) 2011/ REJECT HDR9040 Leaving the past behind That last line of course I role forward each month. Yes, I run Spam Assassin too. But I don't even want to see stuff where the header has the date wrong in the spam folder. That last rule alone blocks a few dozen spam each day, on a very small mail system. Whit
