procmail
[Top] [All Lists]

Re: SPAM sent to 'sub'-accounts (email1(_at_)domain)

2000-11-05 05:33:47
At 08:36 02/11/2000 -0800, Michael Keating wrote:
At 07:05 PM 10/31/00 -0200, Hermann Wecke wrote:
:0
* ^TO:.*(1|2|3|4|5|6|7|8|9)
/dev/null

That recipe, I believe, will catch addresses of the form 
Ilike2ski(_at_)bigdomain(_dot_)com and biff(_at_)number3isp(_dot_)net(_dot_) 
What's more, if any line 
matching the ^TO: macro (including ^To:, ^Cc:, ^Bcc:, and others), has a 
decimal digit occurring anywhere in it, the message will go to /dev/null.

So, if I am right, it does not look so safe.

Am I right?

I guess you are correct...

So, a little modification is necessary...

:0
* ^TO:.*(1|2|3|4|5|6|7|8|9)@
/dev/null

This will catch email addresses where the local -part ends with a digit 1-9. 
It will not notice herman0(_at_)your(_dot_)com




I know a university where the local-part of students' email address is 
numeric. It's moderately common (I have seen it discussed wrt fetchmail 
several times; fetchmail's parser wasn't clever enough to spot them in 
contect).

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail