procmail
[Top] [All Lists]

Re: (procmail) Re: Interesting spam pattern

1998-05-11 11:37:22
Chris Osborn wrote:

<> > As far as I can tell, there's no requirement in RFC 822 for multiple
<> > lines in a Received: header.
<> 
<> No, there's certainly no *requirement*.
<> 
<> However, the filter works for me. *All* of the mail I get that
<> isn't spam has Received:  headers that span two lines.

Then you won't get this reply ... The one line header vs. multi-line
header is config'ed in sendmail:

   An older cf file (V8.7):

   HReceived: $?sfrom $s $.$?_($?s$|from $.$_) $.by $j ($v/$Z)$?r with $r$. id 
$i$?u for $u$.; $b

   A later (V8.8) one:

   HReceived: $?sfrom $s $.$?_($?s$|from $.$_)
           $.by $j ($v/$Z)$?r with $r$. id $i$?u
           for $u; $|;
           $.$b

IOW -- You'll find a +lot+ of one line Received: headers out there ...

Reto
-- 
R A Lichtensteiger       rali(_at_)meitca(_dot_)com -or- 
rali(_at_)world(_dot_)std(_dot_)com
                         http://www.meitca.com/ITA/People/rali
    "Yes, you're doing things right, but are you doing the right things?"
    "Nope.  I'm just doing something dumb fast."

<Prev in Thread] Current Thread [Next in Thread>