body_checks

[iwanalearn]

I'm just learning linux/postfix/etc. I've been working with body_checks to stop the flow of spam. It seems to work for me with one exception. I can't get any phrases with a "period" to be rejected.
e.g.
/

http://www\.test/

REJECT Spam
/

http://www.test/

REJECT Spam

Neither of these works to stop

http://www.test.com

when it is in the content of the body.
What could I be doing wrong.
Thanks

 

[ISManager007]

I believe the statement in this scenerio should be
/http\:\/\/

http://www\.test\.com/

REJECT
OR Just
/

http://www\.test\.com/

REJECT
OR
/

http://www\.test.*/

REJECT

In my expierence, if you only do /

http://www\.test/

REJECT It only tries to match the exact phrase of

http://www.test

Mark

 

[ericbrunson]

Do you have regex support built into postfix?

 

[iwanalearn]

Thanks for the responses.
Actually I found something that does work well.
I've been using the following.
/

http://www.*test.*com/

REJECT

I found this on a different forum.

Yes I do have regex built into postfix.
Again Thanks

 

[ericbrunson]

You need to be aware that the .* in the regex you are matching may not be doing what you think it is doing.

. means 'match any character'
* means 'match zero or more instances of the preceding character'

So

http://www.*test.*com

will match all the following:

http://www.test.com

http://wwwtestcom

http://www.testing.com

http://wwwtestcom.com

http://wwwsomethingelsetest.com

http://www.wwwAnyThingtestSomethingElsecom.com

Which I think is different from your intention.

As in ISManager007's post, backslashing the . takes away it's special meaning and makes it match a dot.

Though it does take the discussion full circle as to why your original rules didn't work.