On 24 Mar 2019, at 18:15, dstonek wrote:
Where can that be configured?
I posted Header and Body checks.
It is strange because the sender is a regular user the recipient
receives
emails from.
My guess is that your 'header_checks' regex /.icu/ is matching something
in the full x-microsoft-antispam-message-info header. Postfix does not
log all of very long headers and that's a very loose regex because you
have the wildcard '.' and probably meant /\.icu/ That seems like a very
risky pattern to me but do as you want with your own mail. More
generally, header_checks is a very weak tool for spam filtering by
design. If you want anything like spam control, you need something
external.
Note that "x-microsoft-antispam-message-info" is not documented, but it
almost always contains >300 or <100 characters and most often is 428
characters.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Available For Hire: https://linkedin.com/in/billcole
