From: /dev/rob0 (rob0gmx.co.uk)
Date: Thu Aug 17 2006 - 14:54:52 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thursday 17 August 2006 14:38, Lonn Hunter wrote:
> I am using body checks and they seem to work really well most of the
> time. However, it was my understanding that the following will cause
> a rejection
>
> /cialis/ REJECT some rejection message here
>
> I had legitimate e-mail that was kicked out because the of the word
> specialist. How would I get the body check to only use the whole
> word cialis? This is disturbing in that there may be other
> combinations such as this that I can't forsee.
>
> Did I do something wrong?

Indeed. There is no way you can win a war like that. Spammers are
already far ahead of you. At this point I bet a check for "cialis" in
the body will mostly affect legitimate mail.

The answer is to do as much filtering in SMTP as possible. See here for
more ideas:
    http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt
    http://www.spamhaus.org/effective_filtering.html

Then, set up an after-queue content_filter as described in the Postfix
FILTER_README. Amavisd-new is a good choice.
--
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]