On Fri, 19 Sep 1997, Matt Korth wrote:
It catches combinations of Pegasus headers that Pegasus itself never
uses. I have found it to be one of the more useful filters in
my junkfilter.
Yep. I have something similar:
:0
* ^()\/(Comments: Authenticated sender|X-PMFLAGS)
* !^X-Mailer:.*Pegasus Mail
{
LOG="spamkill: sender forged $MATCH
"
# insert *plonk*ing of your choice here...
}
You may want to insert another line:
* !^Resent-To:
Pegasus doesn't generate its "X-Mailer: Pegas..." when it is used to
resend a message.
GReg
--
Gregory S. Sutter "How do I read this file?"
mailto:gsutter(_at_)pobox(_dot_)com "You uudecode it."
http://www.pobox.com/~gsutter/ "I I I decode it?"