postfix and header_checks

[Paul Lussier]

Hi all,

Does anyone here use postfix's header_checks or body_checks maps as a
spam-prevention mechanism?

We seem to have gotten spammed rather heavily last night, and most of
the maillog entries seem to indicate that, for some reason, though the
messages had no from address, they weren't spam.  Since I don't
currently *have* one of the messages in question[1], I can't look to
see what the headers are in order to write header_checks rules.

I've found a couple of header_checks maps which use the regexp:
engine, but they seem fairly specific to bogus anti-virus warnings[2].

I'm hoping to not have to entirely re-invent the wheel here :)

Thanks!
-- 
Seeya,
Paul

Footnotes:

[1] The spammer attacked one of the few externally exposed internal
    mail lists, on which, there were only two members.  Both are
    sales-types, and the best I can do is get them to forward me a
    copy from their Blackberry.  Let's ponder for moment, shall we?,
    on just how useful *that* excercise was! :)

[2] http://std.dkuug.dk/keld/virus/header_checks
    http://www.t29.dk/antiantivirus.txt