jmpatagonia:
> Hello I need help to using header_checks, I create a rule
>
> /^Subject:.*hacked*/ DISCARD
An alternative is to use HOLD action, assuming you aren't using
software that hijacks the HOLD feature for other purposes, such as
mailscanner. Then you can review the email with "postcat -q" and
delete it with "postsuper -d".
> that work propertly, but a want to know it is posible to email me o to alert
> me when this rule occur or is aplicated. For some way. Oviusly I see that on
> the mail.log
A logfile scanner such as fail2ban could do that for you. Ideally
there is a rate limit so that you won't be email bombed.
Wietse
