procmail
[Top] [All Lists]

Re: Best way to catch "no ^From:" spam?

1999-01-14 09:08:10
At 11:36 13-01-99 -0600, Jeff spoke:

My first idea was basically:
:0
* !^From:
/dev/null

but this is clearly not right.  So ...

How clearly?

I'll look up the exact syntax for doing this if need be; right now
I'm just wondering if this is the best way to do this in procmail.

Here's a rule I have in my twits.rc file, and it works just fine:

# From: header not even present!
# Anybody mailing and not identifying a from, MUST be spamming.
:0
* ! ^From:.*
{
        LOG="SPAM: No From:$TWITVER"

        :0:
        |gzip -9fc>>$MAILDIR/twits.gz
}


The whole action of the rule _could_ be replaced with a simple /dev/null
delivery if you so choose.  I like to keep a copy of stuff caught as spam
so I can check it through revised filters at a later date.

---
 Please DO NOT carbon me on list replies.  I'll get my copy from the list.

 Sean B. Straw / Professional Software Engineering
 Post Box 2395 / San Rafael, CA  94912-2395

<Prev in Thread] Current Thread [Next in Thread>