OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Can't whitelist header / bodychecks

From: Ralf Hildebrandt (Ralf.Hildebrandtcharite.de)
Date: Fri Jun 12 2009 - 09:50:28 CDT


* EASY steve.hilldigitalcertainty.co.uk <steve.hilldigitalcertainty.co.uk>:

> > for <abusebtbroadband.com> ...
> >
> > You COULD solve this using:
> >
> > /^Received: from .*(cmodem|dhcp|adsl|broadband|dynamic).*by / REJECT dynamic host in headers
> >
> > It's worth a try.
> >
> Indeed, but it's *not* in the header section of the email, is it! It has
> been pasted into the *BODY* of an email.

Try forwarding it someplace else, instead of abusebtbroadband.com

Whenever you're forwarding it to a recipient that matches
(cmodem|dhcp|adsl|broadband|dynamic) -- in this case "btbroadband.com"
matches "broadband" you'll be seeing this, since you own Received headers
will match the header_checks regexp.

You COULD strip your own internal Received: headers to avoid this. But
that's solving the wrong problem.

--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Nichts kann ohne Einsamkeit entstehen.