Help with large message / blacklists bypassed

am.lists am.lists at
Wed Aug 1 15:36:13 IST 2007

On 8/1/07, Alex Broens <ms-list at> wrote:
> I'd block the sender with a Postfix header rule.
> Alex

Thanks for this, Alex... sometimes in panic mode you forget the obvious.

I was able to find something unique across all messages, and there was
something inserted by their MSExchange server  (thread id)  that was
constant, and I added it as follows to /etc/postfix/header_checks

/thread-index: AcfQVR+P5JkcCC8rQ4GAyZsYZ1xAcA==/ REJECT Misbehaving MTA
/^Received:/ HOLD

Thanks to all replies.


More information about the MailScanner mailing list