![](https://seccdn.libravatar.org/avatar/7527ff019b7a5078cb8647683a49d303.jpg?s=120&d=mm&r=g)
Theo v. Werkhoven wrote:
Wed, 23 Jun 2004, by k.lelong@ace-electronics.be:
....
There is a very nice tool for that called 'pcretest' $ pcretest PCRE version 4.4 21-August-2003
I'm going to look into this, but has pcre the same syntax as regexp ? As far as I could understand by reading the regexp man pages, the ! means 'not', inversion of the following rule. Maybe I forgot some brackets.
Another thought : should Amavis/Spamassassin do this ?
No imho. Using body/headercheck is only a very crude way to fight UCE, with a high possibility of false positives and negatives. Only use it for some well-defined cases (like the well known win32 executable strings, SoBig Subjects etc.)
Noted.
E.g. Subjects without content can better be dealt with by SA, with a local rule and a + score of a few points.
I was looking for some docs about setting up Spamassassin, but maybe I'm not looking good enough. That's why I wanted to try it with postfix's header checks. -- Met vriendelijke groeten, Koenraad Lelong R&D Manager ACE electronics n.v.