Re: [Sqlgrey-users] modifying the Triplet

[Dan F. <da...@ha...>]

Benjamin Confiino wrote:
> Personally I think that having from-subject-IP would
> be more usefull than from-to-IP is there some way to
> change it over
Cant be done.. Sqlgrey  does its rejection upon recieving MAIL FROM. At 
this point no subject has been transmitted, as the subject is part of 
the "mail-data", not the Envelope.
As sqlgrey is a postfix-policy daemon, and AFAIK policy-deamons  cannot  
read the mail-content, which is basically what you want.

And besides that, i cant really see why youd want greylisting on 
subject. It kinda defeats the purpose of a greylist. If a spammer is 
transmitting a big batch of mails, all using the same subject, he would 
get 4xx for 5 minutes and then get whitelisted, thus letting the 
remaining 5million mails through.. even though he didnt retransmit any 
of the original mails, since youd only check the subject.

- Dan