But shouldn't
* ^From:.*<[0-9]+@
deliver rather than delete mail that has a dot in the account field? I am
trying to delete mail of the form:
Joe <123456(_at_)spamhaus(_dot_)com>, not
Joe <123456(_dot_)123456(_at_)spamhaus(_dot_)com>
But I suspect Ralph has pointed us the the next spammer technique.
Urrrrrgh! Time to prepare for it.
BTW: So far, I received only the one spam with a From: header line in this
format. I do not plan to implement the recipe until it recurs.
Felix Tilley
============================================================
Date: Tue, 24 Feb 1998 15:58:48 -0800 (PST)
From: Ralph Sims <ralphs(_at_)nwnexus(_dot_)com>
To: gsutter(_at_)pobox(_dot_)com
cc: Procmail List <procmail(_at_)informatik(_dot_)rwth-aachen(_dot_)de>
Subject: Re: All Numeric Accounts (Again)
Message-ID:
<Pine(_dot_)GUL(_dot_)3(_dot_)96(_dot_)980224155449(_dot_)15509A-100000(_at_)nfs1(_dot_)halcyon(_dot_)com>
Content-Type: TEXT/PLAIN; charset=US-ASCII
caution in deploying something like this. As an "FYI", Pagenet uses
something like 1231234567(_dot_)1234567(_at_)pagenet(_dot_)net for an address.
Yes, you
probably won't see this often, but it can happen.