I don't think my assumption is completely unwarranted. I created a header_checks rule and then sent a message from outside our system and this shows up in the log:
Nov 4 12:09:24 kest postfix/cleanup[13287]: 375FR2F2491F: reject: header Subject: VvVvV test message...[etc] Then when I do a test message with a body_checks rule, I get the following in the log: Nov 4 12:18:01 kest postfix/cleanup[8218]: 1G6112F36227: reject: body <html><body><div style="color:#000; background-color:#fff [etc...] ________________________________ From: Wietse Venema <wie...@porcupine.org> To: Postfix users <postfix-users@postfix.org> Sent: Tuesday, November 4, 2014 6:57 PM Subject: Re: Correction J.: > Apologies. I'm not sure why "[BODY]" is showing up after the > rejection line from header_checks and body_checks, but I was > mistaken about it disclosing exactly why the message was rejected. > Regardless of whether it's a body_check or header_check that is > matched, the failure message says "[BODY]" either way. Never assume that what you claim is actually correct. What evidence do you actually have that what you see is the result of matching a header_checks or body_checks rule? For example, what is the actual evidence in the mail logfile? Wietse