Thank you ALL again who helped solved a MONSTER problem which
now is "mostly" solved, and the 10,000 pieces per month of bad
forgery related junk is being forwarded to those who have the
responsibility to put a stop to it.
However, some new stuff has shown up which has me a bit baffled.
Nowhere in the headers (3 examples below) can I find an "intended
recipient" on which to filter. Since they are coming from various
sources, I'm wondering if there is any "hidden" key to unlock the
actual "for <blah(_at_)blah(_dot_)com>" or "sentto
<blah(_at_)blah(_dot_)com>"??? Since
multiple addresses funnel into one mailbox on my ISP, these new
ones are slipping through. I don't know which domain name is involved
so I can to a mega-trash on any future ones.
I have "message body text" filtering which axes out most of the
other trash mail based upon common spammer language (phrases & words).
Unfortunately, I also have very legit e-mail which gets /dev/null/'d
because of this which is most uncool.
Is there some "hidden key" I should know about regarding the examples?
Thank you.
Eric
---------
Received: from mail14.jump.net (mail14.jump.net [207.8.30.14])
by MYISP.com (8.10.0/8.10.0) with ESMTP id e79AdKx57154;
Wed, 9 Aug 2000 03:39:20 -0700
Received: (from majordomo(_at_)localhost)
by mail14.jump.net (8.9.3/) id LAA16119;
Mon, 7 Aug 2000 11:17:12 -0500 (CDT)
Date: Mon, 7 Aug 2000 11:17:12 -0500 (CDT)
From: tips-owner(_at_)lists(_dot_)togethersoft(_dot_)com
Message-Id: <200008071617(_dot_)LAA16119(_at_)mail14(_dot_)jump(_dot_)net>
To: Togethertips(_at_)lists(_dot_)togethersoft(_dot_)com
Subject: Together 4 Tips and Tricks Issue #3
Sender: tips-owner(_at_)lists(_dot_)togethersoft(_dot_)com
Precedence: bulk
Reply-To: tips-owner(_at_)lists(_dot_)togethersoft(_dot_)com
Errors-To: errors(_at_)lists(_dot_)togethersoft(_dot_)com
---------
Received: from que.thetrip.com (que.thetrip.com [205.169.236.66])
by MYISP.com (8.10.0/8.10.0) with ESMTP id e79DA9x35732;
Wed, 9 Aug 2000 06:10:09 -0700
Received: from nobody by que.thetrip.com with local (Exim 3.03 #1)
id 13MR2B-0006tE-00; Wed, 09 Aug 2000 02:16:19 -0600
To: "Valued TRIP.com Customers" <nobody(_at_)que(_dot_)thetrip(_dot_)com>
From: "TRIP.com newsroom" <news(_at_)TRIP(_dot_)com>
Reply-to: feedback(_at_)TRIP(_dot_)com
Subject: Deals and News from TRIP.com!
X-TTC-ID: nl-1-reg-1019339
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Message-Id: <E13MR2B-0006tE-00(_at_)que(_dot_)thetrip(_dot_)com>
Date: Wed, 09 Aug 2000 02:16:19 -0600
---------
Received: from kack.commontown.com ([203.116.226.167])
by MYISP.com (8.10.0/8.10.0) with ESMTP id e7AMRWT31556;
Thu, 10 Aug 2000 15:27:42 -0700
Received: (from ctown(_at_)localhost)
by kack.commontown.com (8.9.3/8.9.3) id VAA27141;
Thu, 10 Aug 2000 21:13:35 +0800
Date: Thu, 10 Aug 2000 21:13:35 +0800
Message-Id: <200008101313(_dot_)VAA27141(_at_)kack(_dot_)commontown(_dot_)com>
To: "All CommonTowners"<kaki(_at_)commontown(_dot_)com>
Subject: Exciting Events Coming Up!
From: "Friendly Pepe"<pepe(_at_)commontown(_dot_)com>
Content-Type: text/html
X-Logged: Logged by kack.commontown.com as VAB27141 at Thu Aug 10 21:13:35
2000
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail