Hmmm. You're quite correct, I didn't spell out enough details to make my
problem clear. Sorry. Here's a second attempt at what I meant to ask.
I personally hold the netconnect.net domain. In that domain, there are
about a half-dozen valid addresses, including
greg(_at_)netconnect(_dot_)net(_dot_) The
netconnect.net domain is being 'answered' by a machine in the clari.net
domain (via virtual hosting). Thus, all mail to currently non-existant
addresses in netconnect.net are being sent by default to
greg(_at_)clari(_dot_)net(_dot_)
This means that I get all spam aimed at netconnect.net.
The big problem is that there is a domain, connect.net, that has
an ISP service in it, and lots of users mis-direct their return or originating
address to be netconnect.net instead of connect.net. This means that I end up
getting all their mail, spam or not.
What I want to do with procmail is to intercept real netconnect.net
addresses and send them where they really go. That much works using normal
sendmail aliasing. I also want to send a polite note to all connect.net
mis-directed mail, bouncing it back to the sender. I do that with a procmail
TO_ matching rule, and that works okay as well.
What doesn't work is to detect and eliminate what is usually, but not
always spam. That is, mail that does not appear to have a valid 'to' line, as
in the example I provided. The only indicator I find there is a 'for' line in
a multi-line 'received' entry. I don't want to just dump it in the circular
file, I dont want to look at it, cause it's often personal. I don't want to
have to hand re-address mail, as I do now.
So, any suggestion would be helpful here.
I'll take your previous comments into account.
Thanks,
Greg Maples
Greg Maples | ClariNet e.News/WebNews: | 4880 Stevens Creek Blvd
ClariNet Communications | The Internets first, best | Suite #206
Operations Director, CIS | and largest online news. | San Jose, CA. 95129
greg(_at_)clari(_dot_)net | Over 1,500,000 subscribe | Voice:
(408) 296-0366
http://www.clari.net | and growing. Ask for it! | Fax: (408) 296-1668