MS+Postfix, Selective HOLD

Hugo van der Kooij hvdkooij at
Sun Apr 13 10:12:54 IST 2008

Hash: SHA1

Glenn Steen wrote:
| On 12/04/2008, Hugo van der Kooij <hvdkooij at> wrote:
|>  Hash: SHA1
|>  Glenn Steen wrote:
|>  |> Nah, it likely is a regexp thing:-).
|>  |>  Your pattern
|>  |>  /.*/
|>  |>  litteraly means "anything containing at least one character". So you
|>  | Correction. It _should_ mean anything containing 0 or more characters,
|>  | but seem to mean the above... Which will miss the empty string. Sigh.
|>  |
|>  |>  need match the empty recipient as well with a separate
|>  |>  /^$/ HOLD
|>  |>  pattern in there, or else the empty sender (==MAILER-DAEMON,
|>  |>  postmaster or ...:-) will simply "fall through".
|>  |>  Try it and tell us how you fare!
|>  Tried that one. But it is not working. The recipient is in fact the
|>  postmaster and it contains a sender as well.
|>  For example:
|>  Return-Path: <ssodnieg at Oqlaw.Com>
|>  X-Original-To: postmaster at
|>  Delivered-To: postmaster at
|>  Received: from
|>  ( [])
|>         by (Postfix) with ESMTP id E98EB17E8010
|>         for <postmaster at>; Sat, 12 Apr 2008 20:49:25 +0200
|> (CEST)
|>  User-Agent: Microsoft-Entourage/
|>  Date: Sat, 12 Apr 2008 14:49:23 -0400
|>  Subject: Get more action today
|>  From: bromee <ssodnieg at Oqlaw.Com>
|>  To: "postmaster at" <postmaster at>
|>  Message-ID: <BBF92F96.1%ssodnieg at Oqlaw.Com>
|>  Thread-Topic: Get more action today
|>  Thread-Index: AcicrGXHIUUszYsXR3ujRk1w1EMh9Q==
|>  Mime-version: 1.0
|>  Content-type: multipart/alternative;
|>  ~        boundary="B_4144125777_14746"
|>  And the mail log:
|>  Apr 12 20:49:25 balin postfix/smtpd[32542]: connect from
|>  Apr 12 20:49:25 balin postfix/smtpd[32542]: E98EB17E8010:
|>  Apr 12 20:49:26 balin postfix/cleanup[6768]: E98EB17E8010:
|>  message-id=<BBF92F96.1%ssodnieg at Oqlaw.Com>
|>  Apr 12 20:49:26 balin postfix/qmgr[17060]: E98EB17E8010:
|>  from=<ssodnieg at Oqlaw.Com>, size=1414, nrcpt=1 (queue active)
|>  Apr 12 20:49:26 balin postfix/local[19795]: E98EB17E8010:
|>  to=<hvdkooij at>, orig_to=<postmaster at>,
|>  relay=local, delay=0.52, delays=0.51/0/0/0.01, dsn=2.0.0, status=sent
|>  (delivered to command: /usr/bin/procmail -Y)
|>  Apr 12 20:49:26 balin postfix/qmgr[17060]: E98EB17E8010: removed
|>  Apr 12 20:49:26 balin postfix/smtpd[32542]: disconnect from
|>  I was thinking wether or not it is an issue with the aliases. But I have
|>  another alias to the same account which is not hampered by the issue.
|>  Hmmmm. Having said that. The postmaster account is in effect a double
|>  aliases. Postmaster -> root -> hvdkooij
|>  But making it a direct alias did not matter at all. Other indirect
|>  aliases do not suffer from this.
|>  Hugo.
| Hm, strange.... I'll have to test a bit .... But first I need get some
| sleep... I've been working since 08.30 (which is about 17 hours back)
| non-stop... Oracle/AIX/nitty-gritty little details playing havoc with
| a simple upgrade that should've been 4hours work (including
| everything...). Sigh.
| Email is so much simpler:-):-). Well, apart from your mini-mystery ...:/
| What I'm trying to say... is that in my current shape, I'm no real
help to you:(

Well. It will not stop me from looking a bit further. (Please enjoy some
sweet dreams while you sleep.) So I picked up the source RPM for postfix
and started to grep for postmaster.

The following remark struck me as interresting:
~  * By default, Postfix probe messages have "postmaster@$myorigin" as the
~    sender address. This is SAFE because the Postfix SMTP server does not
~    reject mail for this address.

So I throw in the following line back into header check:
/^To:.*postmaster at      HOLD

Now I need to sit back and wait .......

It looks we got ourself a winner here. The added header check works like
a charm. So it looks like we found an alternative to the HOLD everything
~ method. So I now need to sit down and describe the method in a bit more
details so other people can enjoy it too if they like.


- --
hvdkooij at     

	A: Yes.
	>Q: Are you sure?
	>>A: Because it reverses the logical flow of conversation.
	>>>Q: Why is top posting frowned upon?

Bored? Click on and rate those images.

Version: GnuPG v1.4.7 (GNU/Linux)


More information about the MailScanner mailing list