I'm trying to be a little more specific in a body_check to reject certain spoofed spam. I have it currently working when searching for just a single line but would like to learn how to expand the search to multiple lines. The spam looks like (modified to prevent being rejected by the body_checks in place now):
Hello!<2 newlines, a space, then 2 more newlines> New message, please read <then a random http link> $ postmap -q - pcre:/opt/local/etc/postfix/body_checks-test < /tmp/spam.msg doesn't return a hit using either of these: /^Hello\!\s+New message, please read \<http/ REJECT or /^Hello\![[:space:]]+New message, please read \<http/ REJECT postfix 3.0.3 and pcre 8.37 running on OS X 10.8.5 Thanks for any pointers, -Terry Terry Barnum digital OutPost Carlsbad, CA http://www.dop.com 800/464-6434
