OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Backscatting filter?

From: Ralf Hildebrandt (Ralf.Hildebrandtcharite.de)
Date: Wed May 07 2008 - 05:54:32 CDT


* Sebastian Ries <Sebastian.Riesdtnet.de>:
> Hi
>
> > I use in header_checks and body_checks:
> >
> > /^Received: from .*by nomail\.charite\.de/ REJECT Fake nomail.charite.de Received: Header found
> >
> > if /^Received: from .*by mail(-ausfall)?\.charite\.de/
> > !/ \(Postfix\) with /i REJECT Fake charite.de Received: Header found, this is a bounce for a mail our system did not send!
> > endif
> >
> > This makes sure that a bounce which contains a fake
> > mail/mail-ausfall.charite.de Received: header will be rejected.
> >
>
> Can anyone explain what this really does?
> I do not want to use check that I do not really understand...

WENN der Received Header mail.charite.de oder mail-ausfall.charite.de
beinhaltet DANN prüfe, ob da auch "(Postfix)" drinsteht.
Wenn nicht ist es eine Fälschung.

Pardon my German.

--
Ralf Hildebrandt (Ralf.Hildebrandtcharite.de) snickebocharite.de
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
The government is CLEARLY an out of control robot that has decided the
greatest danger to America is Americans.