Thanks. Not the smartest spammer. The "from" lasts a while but the "reply" is
static for months. I just got tired of blocking the "from" periodically.
Original Message
From: postfix-us...@dukhovni.org
Sent: December 11, 2019 6:57 PM
To: postfix-users@postfix.org
Reply-to: postfix-users@postfix.org
Subject: Re: Block email based on reply field
> On Dec 11, 2019, at 9:38 PM, li...@lazygranch.com wrote:
>
> I have a spammer who uses all sorts of "from" addresses but the same
> "reply" address. Any way to block this spammer in Postfix.
main.cf:
pcre = pcre:${config_directory}/
header_checks = ${pcre}header-checks.pcre
# Set empty, or keep existing non-default value
nested_header_checks =
mime_header_checks =
header-checks.pcre:
if /^Reply-To:/
# Adjust to exactly match the observed header
# Includes rule id in reject message
/[:\s<]spammer@example\.net[>\s]/ REJECT 5.7.1 Access denied R0001
/^/ DUNNO no more Reply-To rules
endif
--
Viktor.
