On 07 Nov 1997 10:13:50 +0200, <jari(_dot_)aalto(_at_)poboxes(_dot_)com> wrote:
* [ \t]*<html>
^^
Jari, you still have the tabs messed up.
FWIW, here's what I use:
:0B
* ^^ *<HTML>
{ ... deal with it ... }
This only catches messages which begin with a <HTML> tag on the first
line, but that never gave me any false matches, and rarely missed
anything. (Replace the braced expression with something suitable, such
as /dev/null -- that would throw away all matching messages.)
In response to Barbara's original question, if you are consistently
bombarded from the same address, take it up with your postmaster.
Chances are you can get that site blocked from your site completely.
In the meantime, assuming the VERY FIRST line of the messages you
receive always begins with a unique string something like
"From vandal(_at_)spam(_dot_)net ..." (note the absence of a colon after
"From",
and the two spaces after the e-mail address), this filter will direct
them to a temporary file:
:0
* ^^From vandal(_at_)spam\(_dot_)net( )
/tmp/vandalism
You could direct that to /dev/null instead if you like, but in /tmp it
will hopefully disturb no-one and you can still keep it around as
evidence. (It will get deleted when the machine is rebooted, if no
sooner. Ask your admin where else you could put it if you don't like
that.)
There are some good Procmail tutorials on the web which you might want
to look at; I have links to several at
<http://www.iki.fi/~era/procmail/links.html>
Hope this helps,
/* era */
--
Paparazzi of the Net: No matter what you do to protect your privacy,
they'll hunt you down and spam you. <http://www.iki.fi/~era/spam/>