Postfix version 3.1.1

Hello List!

We have a customer that occasionally receives messages like this...

Return-Path: <to...@external-domain.tld>
From: "Free iPad <jsm...@mydomain.tld>" <to...@external-domain.tld>
To: <us...@mydomain.tld>
Subject:Free iPad

>From the looks of it, messages like these are from legit domains with a 
>carefully crafted "displayName".

So the "displayName" is "Free iPad <jsm...@mydomain.tld>", and the "true" 
sender is to...@external-domain.tld. 

We were thinking using a header_check rule, something like this; but didn't 
work due to the "backtracking limit exceeded" warning. 

/^From:(.*)*\<*@*\> \<*@*\>/   REJECT    #Sorry, we do not allow emails with 
multiple FROM senders

Is it possible to use header_check feature to reject messages with carefully 
crafted displayName?

Any suggestions welcome! Thank you!



Best Regards,

--
Rick King




Reply via email to