Help with large message / blacklists bypassed

[am.lists]

On 8/1/07, Alex Broens <ms-list at alexb.ch> wrote:
>
> I'd block the sender with a Postfix header rule.
>
> Alex
>

Thanks for this, Alex... sometimes in panic mode you forget the obvious.

I was able to find something unique across all messages, and there was
something inserted by their MSExchange server  (thread id)  that was
constant, and I added it as follows to /etc/postfix/header_checks

/thread-index: AcfQVR+P5JkcCC8rQ4GAyZsYZ1xAcA==/ REJECT Misbehaving MTA
/^Received:/ HOLD

Thanks to all replies.

Angelo