On 5/21/10 7:35 PM, Karsten Bräckelmann wrote:
On Sat, 2010-05-22 at 00:13 +0200, Karsten Bräckelmann wrote:
On Fri, 2010-05-21 at 17:43 -0400, Adam Katz wrote:
header SINGLE_HEADER_2K ALL:raw =~ /^(?=.{2048,3071}$)/m
It does not match a single header, let alone a *specific* header as the
one mentioned, but ALL headers. It effectively checks the entire
headers' size.
Being the one credited with suggesting it, I would rather just look at
the X-Ymail-OSG header.
I can EASILY get my MTA to block (at the gateway) any email with a
random header > xxxxx in size.
if X-Ymail-OSG is > 1024 bytes, its just about guaranteed to be spam.
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
