procmail
[Top] [All Lists]

Re: Identify a .forward[ed] message

1999-05-08 12:03:44
Note:  I've already posted another message in this thread before
seeing this reply

"David W. Tamkin" <dattier(_at_)Mcs(_dot_)Net> writes:

Harry Putnam asked,

| How can one identify easily, messages coming from a .forward mechanism
| at a different address, in the case where no "To: " field is present?

 ... or a To: field that doesn't name you.



If the topmost Received: header of mail you get at newsguy.com mentions
worldnet, then likely it was forwarded.  Do you want to differentiate
it from mail that originates on worldnet?  (Do you get any mail that
originates on worldnet?)

Yes and yes

A further complication may be if I happen to send a test message
or something similar from my home machine to worldnet address.  Since
my smtp server is worldnet it would then originate and be forwarded
from worldnet.

My first guess would be something like this, but it's probably not so great.
I'll have a better suggestion below.

 :0:
 # if it's addressed to worldnet, assume it was sent there (cheapo shortcut)
 * ^TO_yourworldnetid(_at_)worldnet\(_dot_)att\(_dot_)net
 worldnetforwards

That one for sure

 :0E: # otherwise
 # see if there are at least three Received: headers to weed out mail that
 #  came straight from its source without forwarding
 * ^Received:(.+$)*Received:(.+$)*Received:
 # suck up the topmost
 * ^Received:\/.+
 # check it for any mention of worldnet
 * MATCH ?? worldnet\.att\.net
 # and file if there is
 worldnetforwards

This is probably getting close to the mark but, even direct mail has
several Received lines:

Received: from localhost (IDENT:reader(_at_)localhost [127.0.0.1])
        by satellite.local.lan (8.9.1/8.9.1) with ESMTP id FAA02630
        for <reader(_at_)localhost>; Sat, 8 May 1999 05:43:37 -0700
Received: from pop.newsguy.com
        by fetchmail-4.5.8 POP3
        for <reader/localhost> (single-drop); Sat, 08 May 1999 05:43:37 PDT
Received: from beach.silcom.com (beach.silcom.com [199.201.128.19])
        by newsguy.com (8.9.1a/8.9.1) with ESMTP id FAA98898
        for <reader(_at_)newsguy(_dot_)com>; Sat, 8 May 1999 05:42:08 -0700 
(PDT)
Received: from beach.silcom.com (beach.silcom.com [199.201.128.19])
        by beach.silcom.com (Postfix) with SMTP id A432D8E1
        for <reader(_at_)newsguy(_dot_)com>; Sat,  8 May 1999 05:42:07 -0700 
(PDT)


Better, I think, would be to forward your worldnet mail in such a way that
makes it identifiable.  To you have plus-suffixing available on newsguy?
If so, you could change your .forward on worldnet to read something like

***8<snip

The AT&T account has a web interface to setup forwarding.  The only
choices are the address to be forwarded to and whether to leave a copy
or not.

























<Prev in Thread] Current Thread [Next in Thread>