On Tue, 28 Oct 1997, Timothy J Luoma wrote, following-up Felix Tilley:
Another good reason to filter messages to a temp mailbox rather than sending
it to /dev/null....
:0
* ^Comments:.*authenticated\ sender\ is
/dev/null
:0:
* ^(Comments: Authenticated sender|X-PMFLAGS:)
* !^X-mailer: Pegasus Mail
may_be_spam
More is necessary!
# Pegasus mailer is the only mailer which legitimately generates
# "Comments: Authenticated sender is ..." so kill anything else.
:0E
* ^Comments:.*Authenticated sender
* !^X-Mailer:.*Pegasus Mail
* !^Resent-To:
{ SPAMMER="forged Pegasus auth" }
If Pegasus is used to resend mail to someone else, it does not include
the X-Mailer: header. Therefore the !^Resent-To: is necessary to avoid
losing the mail.
GReg
--
Gregory S. Sutter "How do I read this file?"
mailto:gsutter(_at_)pobox(_dot_)com "You uudecode it."
http://www.pobox.com/~gsutter/ "I I I decode it?"
junk email filter for procmail http://www.pobox.com/~gsutter/junkmail/