DevHeads.net

How in blazes is this still getting through?

header_checks = pcre:/etc/postfix/smtp_header_checks
regexp:/etc/postfix/header_checks

/etc/postfix/header_checks:

/^X-Clacks-Overhead:/ IGNORE
/^Content-Transfer-Encoding:/i PREPEND X-Clacks-Overhead: GNU Terry
Pratchett, Iain M. Banks

/etc/postfix/smtp_header_checks:

if /^From:/
...
/michael.*kors/i DISCARD
...
endif

if /^Subject:/
...
/michael.*kors/i DISCARD
...
endif

That should be being rejected both on From: and Subject: lines. How is
it getting through? Unless it's gaming UTF8 somehow?

Comments

Re: How in blazes is this still getting through?

By Viktor Dukhovni at 07/06/2019 - 17:09

Postfix regular expression tables *default* to *case-insensitive*
matching. You've toggled that back to case-sensitive for some
reason.

The case does not match.

Re: How in blazes is this still getting through?

By Phil Stracchino at 07/06/2019 - 17:17

On 7/6/19 5:09 PM, Viktor Dukhovni wrote:

........... That would be because *I never realized that*.

Thank you Victor!