Tags: antiucechecks, email, grabbed, happily, postfix, servers, setup, software, spaces, subject, subsequent, swag, various

ot: too many subsequent spaces in subject check?

On Software » Email Servers Technologies

5,328 words with 2 Comments; publish: Sun, 25 May 2008 11:23:00 GMT; (40062.01, « »)

when I 1st setup Postfix, I've grabbed a whole swag of various antiUCE

checks from several Postfix howto sites, and, have used happily ever

since;

amongst them, I have a Postfix header subject check like:

# grep subseq header*

header_checks:/^Subject: .* / WARN Your

subject has too many subsequent spaces. Fix the subject and try again.

in the past, I used to reject emails that failed it, howvwer, that was

ocassionally rejecting legitimate emails (with too many spaces...)

I've changed it to 'WARN' at this time

question: is that a worthwhile antiUCE check, does anyone else also

rejects on to many trailing spaces ?

going by last 4 mail logs, it doesn't seem to get called much

if this is a worthwile check, where should that be done, spamassasin/amavis

?

Voytek

----

This SF.net email is sponsored by: Splunk Inc.

Still grepping through log files to find problems? Stop.

Now Search log events and configuration files using AJAX and a browser.

Download your FREE copy of Splunk now >> http://get.splunk.com/

________________________________________

_______

AMaViS-user mailing list

AMaViS-user.emailservers-app.todaysummary.com.lists.sourceforge.net

https://lists.sourceforge.net/lists...nfo/amavis-user

AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3

AMaViS-HowTos:http://www.amavis.org/howto/

All Comments

Leave a comment...

  • 2 Comments
    • Voytek Eymont wrote:

      > when I 1st setup Postfix, I've grabbed a whole swag of various antiUCE

      > checks from several Postfix howto sites, and, have used happily ever

      > since;

      > amongst them, I have a Postfix header subject check like:

      > # grep subseq header*

      > header_checks:/^Subject: .* / WARN Your

      > subject has too many subsequent spaces. Fix the subject and try again.

      > in the past, I used to reject emails that failed it, howvwer, that was

      > ocassionally rejecting legitimate emails (with too many spaces...)

      > I've changed it to 'WARN' at this time

      > question: is that a worthwhile antiUCE check, does anyone else also

      > rejects on to many trailing spaces ?

      > going by last 4 mail logs, it doesn't seem to get called much

      > if this is a worthwile check, where should that be done, spamassasin/amavi

      s ?

      >

      I used something similar a couple years ago with a WARN and

      found it hit nearly equal amounts of ham and spam. So not an

      accurate predictor of spam at that time at that time, and I

      quit using it.

      SpamAssassin would be the right place for something like this

      if you want to continue using it, but only at a very low point

      value.

      Noel Jones

      ----

      This SF.net email is sponsored by: Splunk Inc.

      Still grepping through log files to find problems? Stop.

      Now Search log events and configuration files using AJAX and a browser.

      Download your FREE copy of Splunk now >> http://get.splunk.com/

      ________________________________________

      _______

      AMaViS-user mailing list

      AMaViS-user.emailservers-app.todaysummary.com.lists.sourceforge.net

      https://lists.sourceforge.net/lists...nfo/amavis-user

      AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3

      AMaViS-HowTos:http://www.amavis.org/howto/

      #1; Sun, 25 May 2008 11:24:00 GMT
    • On Fri, November 16, 2007 5:29 am, Noel Jones wrote:

      > Voytek Eymont wrote:

      > I used something similar a couple years ago with a WARN and

      > found it hit nearly equal amounts of ham and spam. So not an accurate

      > predictor of spam at that time at that time, and I quit using it.

      > SpamAssassin would be the right place for something like this

      > if you want to continue using it, but only at a very low point value.

      Noel,

      thanks for confirming, that matches with my observation

      Voytek

      ----

      This SF.net email is sponsored by: Microsoft

      Defy all challenges. Microsoft(R) Visual Studio 2005.

      http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

      ________________________________________

      _______

      AMaViS-user mailing list

      AMaViS-user.emailservers-app.todaysummary.com.lists.sourceforge.net

      https://lists.sourceforge.net/lists...nfo/amavis-user

      AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3

      AMaViS-HowTos:http://www.amavis.org/howto/

      #2; Sun, 25 May 2008 11:25:00 GMT