I didn't mean to imply that any of this was easy. If it was, I'd do it
myself and give you the code. I barely understand what we're protecting
against here, I just know that we're seeing a lot of false positives here.
That's one heck of a regex!! Would it be unsafe to only compare it to
hostnam
v2.5.4(16347)
attachment blocking normally works well. however i noticed the following
today (this i think happened again one or 2 times recently but i'm not
sure):
24.12.2016 13:57:14 id-77033-00267 [Worker_1] xx.xx.45.5
to: localu...@ourdomain.com Whitelisted sender
address: sen...@sende
