文件操作 - mime_header_checks.re

文件: /etc/postfix/mime_header_checks.re

编辑文件内容

# https://www.cyberciti.biz/tips/postfix-block-mime-attachment-files.html

/name=[^>]*\.(bat|com|cmd|cpl|csh|docm|exe|dll|vbs|reg|inf|jar|js|lnk|msi|msp|pif|scf|scr|xlsm)/ REJECT

#
#  https://blog.taurus2.co.uk/2012/11/headerchecks-bodychecks-and-regexp.html
#

# rolex or cartier
/^Subject:(.*)([rR][-\. ]?[oO0][-\. ]?[lL][-\. ]?[eE][-\. ]?[xX][\.? ]?)|([cC][-\. ]?[aA4][-\. ]?[rR][-\. ]?[tT][-\. ]?[iI\|1][-\. ]?[eE][-\. ]?[rR][\.? ]?)/ REJECT Message header rejected [065x]

# Forged mail. One of my domains is taurus2.plus.com and if I receive these headers, they are forged!
/^Received:(.*) +from +(taurus2\.plus\.com) +/ REJECT Forged client name in Received: header: $1
/^Received:(.*) +from +[^ ]+ +$([^ ]+ +[he]+lo=|[he]+lo +)(taurus2\.plus\.com)$/ REJECT Forged client name in Received: header: $2
/^Message-ID:.*@(taurus2\.plus\.com)/ REJECT Forged domain name in Message-ID: header: $1

# viagra
# Looks simular to my body_checks entry, with just '^Subject:.*' prefixing the string.
/^Subject:.*(VP[-]?RX|[vV][ j_\-]?[iI1][ j_\-]?[aA4@][ j_\-]?[gG][ j_\-]?[rR][ j_\-]?[aA4@])/ REJECT Message header rejected [073]

# Block mail with really old dates
/^Date:.*200[0-7]/ REJECT Message header rejected [058] - Date too old!
/^Date:.*19[0-9][0-9]/ REJECT Message header rejected [059] - Date too old!

文件操作 - mime_header_checks.re

文件: /etc/postfix/mime_header_checks.re

编辑文件内容

修改文件时间

删除文件