On Mar 6, 9:21am +0200, Liviu Daia <daia(_at_)stoilow(_dot_)imar(_dot_)ro>
wrote:
Any idea how to catch this one?
Resent-Date: Sat, 6 Mar 1999 05:41:49 +0100 (MET)
From: <auser2(_at_)mail(_dot_)usa(_dot_)com>
To: <procmail(_at_)informatik(_dot_)rwth-aachen(_dot_)de>,
<smartlist-request(_at_)informatik(_dot_)rwth-aachen(_dot_)de>,
<procmail-d-request(_at_)informatik(_dot_)rwth-aachen(_dot_)de>
Date: Thu, 04 Mar 1999 18:36:34 -0500
Message-ID: <36124076(_at_)asudfha(_dot_)com>
Subject: ADV: ENCORE DEVELOPMENT...YOUR CUSTOM HOME BUILDER IN MD, D.C., &
VA.txt
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit
Resent-Message-ID: <"ZK1UHD.A.43.k4J42"@campino>
Resent-From: procmail(_at_)informatik(_dot_)rwth-aachen(_dot_)de
X-Mailing-List: <procmail(_at_)informatik(_dot_)rwth-aachen(_dot_)de>
archive/latest/20310
X-Loop: procmail(_at_)informatik(_dot_)rwth-aachen(_dot_)de
Precedence: list
Resent-Sender: procmail-request(_at_)informatik(_dot_)rwth-aachen(_dot_)de
Content-Transfer-Encoding: 7bit
Maybe I'm missing something, but this is an "honest" spam in that it
contains "ADV:" at the start of the subject header to indicate that it
is an advertisement. Some others use "UCE:" to indicate an unsolicited
commercial email. There is nothing easier than a simple
:0
* ^Subject: (ADV|UCE):
/dev/null
to filter out this whole class of "honest" spams. (In fact, I never saw
the original email, only the replies.)
== Bob