這幾天都發現有偽造公司內部email帳號的信件
在postfix裡該如何過濾
謝謝

原始標頭

From - Wed Oct 19 16:46:59 2011
X-Account-Key: account1
X-UIDL: 000088ef4da2df1d
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <0-xp@carnival.com>
X-Original-To: AAA@example.com.tw
Delivered-To: AAA@example.com.tw
Received: from smtp.example.com.tw (spam.example.com.tw [192.168.1.2])
	by localhost (Postfix) with SMTP id 3B2AF5C05F;
	Wed, 19 Oct 2011 16:40:24 +0800 (CST)
Received: from smtp.example.com.tw (smtp.example.com.tw [192.168.1.3])
	by spam.example.com.tw (NOPAM 20080502(G2)) with ESMTP id 3023900E
	Wed Oct 19 16:36:54 2011
	(envelope-from <0-xp@carnival.com>)
Received: by smtp.example.com.tw (Postfix, from userid 5001)
	id 0C8B25C07C; Wed, 19 Oct 2011 16:40:24 +0800 (CST)
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on smtp.example.com.tw
X-Spam-Level: 
X-Spam-Status: No, score=-94.3 required=5.0 tests=BAYES_40,RCVD_IN_PBL,
	UNPARSEABLE_RELAY,URIBL_BLACK,URIBL_JP_SURBL,URIBL_WS_SURBL,USER_IN_WHITELIST
	autolearn=no version=3.2.4
Received: from [49.15.15.65] (unknown [49.15.15.65])
	by smtp.example.com.tw (Postfix) with ESMTP id 932B15C05F
	for <AAA@example.com.tw>; Wed, 19 Oct 2011 16:40:21 +0800 (CST)
Received: from  49.15.15.65 (account <AAA@example.com.tw> HELO example.com.tw)
	by example.com.tw (CommuniGate Pro SMTP 5.2.3)
	with ESMTPA id 841233138 for <AAA@example.com.tw>; Wed, 19 Oct 2011 14:10:22 +0530
From: <AAA@example.com.tw>
To: <AAA@example.com.tw>
Subject: hi
Date: Wed, 19 Oct 2011 14:10:22 +0530
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-2"
Content-Transfer-Encoding: 7bit
X-Mailer: adkuafmry_41
Message-ID: <9247211853.X5V1QICN226896@jgvxuqbgfbnwcg.jucbgx.va>
X-NOPAM-Status: type=-3;
X-NOPAM-DIAG: 49.15.15.65, luckyheatrs.ru, AbnormalPath,
Greatings my sweety!

My name is Lucy, im  really hot ukrainian girl
I very like the virtual hot meeting.