[recipe snipped]
It catches combinations of Pegasus headers that Pegasus itself never
uses. I have found it to be one of the more useful filters in
my junkfilter.
Yep. I have something similar:
:0
* ^()\/(Comments: Authenticated sender|X-PMFLAGS)
* !^X-Mailer:.*Pegasus Mail
{
LOG="spamkill: sender forged $MATCH
"
# insert *plonk*ing of your choice here...
}
--
korthmat(_at_)cps(_dot_)msu(_dot_)edu http://www.cps.msu.edu/~korthmat
*** People who send me UCE/UBE will be crucified. ***
"Katy, you're a freshman. Find 2,000 people."
--Droz, _PCU_