Re: Can't whitelist header / bodychecks

[EASY steve.h...@digitalcertainty.co.uk]

On Fri, 2009-06-12 at 16:40 +0200, Ralf Hildebrandt wrote:
> * Ralf Hildebrandt <ralf.hildebra...@charite.de>:
> > * Steve <steve.h...@digitalcertainty.co.uk>:
> > 
> > > /^Received: from.*(cmodem|dhcp|adsl|broadband|dynamic)/ REJECT dynamic 
> > > host in headers
> > 
> > OK
> > 
> > > In the logs; tripped on the header filter;
> > > Jun 12 11:01:58 mail4 postfix/cleanup[1419]: B9F16AC09D: reject: header
> > > Received: from [192.168.1.xx] (xx [192.168.1.xx])??by mail4.xx.co.uk
> > > (xx) with ESMTPA id B9F16AC09D??for <ab...@btbroadband.com>; Fri, 12 Jun
> > > 2009 11:01:58 +0100 (BST) from mail4[192.168.1.xx];
> > > from=<mung...@munged.co.uk> to=<ab...@btbroadband.com> proto=ESMTP
> > > helo=<[192.168.1.xx]>: 5.7.1 dynamic host in headers
> > 
> > The regular expression is too broad, since it also matches the "for 
> > <ab...@btbroadband.com>"
> > portion in the headers!
> 
> Since the headers look like:
> 
> Received: from [192.168.1.xx] (xx [192.168.1.xx])  NEWLINE
>           by mail4.xx.co.uk (xx) with ESMTPA id B9F16AC09D NEWLINE
>         for <ab...@btbroadband.com> ...
> 
> You COULD solve this using:
> 
> /^Received: from .*(cmodem|dhcp|adsl|broadband|dynamic).*by / REJECT dynamic 
> host in headers
> 
> It's worth a try.
> 
Indeed, but it's *not* in the header section of the email, is it! It has
been pasted into the *BODY* of an email.