procmail
[Top] [All Lists]

Re: blocking SPAM mail based on header lines

1997-01-23 09:19:56
Hi,

The new sendmail check_* rulesets are great for blocking connections
from banned sites, and for not accepting mail if say the "From" address
does not pass a DNS lookup.

I would also like to globally reject or bounce mail that has certain
header lines in it, perhaps using a global procmailrc file.

Specifically, I want to reject all mail that comes with a header line
like this:

    X-mailer: Floodgate Pro 5.0

Very easy -- just check for the presence of the header.

        :0
        * ^X\-mailer: Floodgate Pro 5\.0
        { EXITCODE = 77 HOST }

I would also like to scan the headers and block mail where any "Received:"
lines have any of the banned domains that I am also directly blocking with 
sendmail.

        :0
        * ^Received:.*(bannedsite1|bannedsite2|bannedsite3)
        { EXITCODE = 77 HOST}

Has anyone done something like this?

Yes.

Any problems?

None that I'm aware of.

Lates!
---------------------------------------------------------------------------
Tim <bodysurf(_at_)pobox(_dot_)com>                          
mailto:bodysurf(_at_)pobox(_dot_)com
Finger bodysurf(_at_)pobox(_dot_)com for my PGP public key (Bits 1024/KeyID 
09DA5C49).
PGP Key FPrint (09/03/94): 4C 97 F1 FA 70 55 68 91  49 D1 AD F2 DD 63 0C 15
---------------------> Please PGP encrypt your email <---------------------

<Prev in Thread] Current Thread [Next in Thread>