procmail
[Top] [All Lists]

Problem with spam detection/deletion

2001-01-30 18:03:42
I am using spam tagging/deletion recipes from: 

http://alcor.concordia.ca/topics/email/auto/procmail/spam/

These recipes attempt to tag spam with a "trash-header" that can later be 
used to process the message.  I modified the "delete" portion to throw the 
mail into a trash folder instead of /dev/null.  Mail gets tagged, but never 
moved to the trash.

I received the following spam today, and here are the headers after 
processing:

--------------------------------------------------------
X-envelope-from: mcmaster(_at_)swmail(_dot_)StorTek(_dot_)COM  Tue Jan 30 
16:50:18 2001
Received: from swmail-atm6.StorTek.COM (swmail.stortek.com [129.80.120.123])    
by falcon.stortek.com (8.8.8+Sun/8.8.8) with ESMTP id QAA08829  for 
<mcmaster(_at_)falcon(_dot_)stortek(_dot_)com>; Tue, 30 Jan 2001 16:50:18 -0700 
(MST)
Received: (from mcmaster(_at_)localhost) by swmail-atm6.StorTek.COM 
(8.7.6/8.7.3) 
id QAA02362 for mcmaster(_at_)falcon(_dot_)stortek(_dot_)com; Tue, 30 Jan 2001 
16:50:17 -0700 
(MST)
X-envelope-from: fAMVW9rq6(_at_)turbomail(_dot_)net  Tue Jan 30 16:50:06 2001
Received: from cyclone.stortek.com (cyclone.stortek.com [129.80.22.130]) by 
swmail-atm6.StorTek.COM with ESMTP (8.7.6/8.7.3) id QAA02321 for 
<mcmaster(_at_)jcm(_dot_)stortek(_dot_)com>; Tue, 30 Jan 2001 16:50:04 -0700 
(MST)
Received: from cyclone.stortek.com (localhost [127.0.0.1])      by 
cyclone.stortek.com (8.9.3/8.9.3) with ESMTP id QAA10243        for 
<mcmaster(_at_)jcm(_dot_)stortek(_dot_)com>; Tue, 30 Jan 2001 16:49:33 -0700 
(MST)
Received: from venus.sphere-sys.co.jp (venus.sphere-sys.co.jp 
[210.196.79.131])       by cyclone.stortek.com (8.9.3/8.9.3) with SMTP id 
QAA10236 
        for <mcmaster(_at_)jcm(_dot_)stortek(_dot_)com>; Tue, 30 Jan 2001 
16:49:32 -0700 (MST)
Received: from 65oBXMAFL (unverified [216.214.116.68]) by 
venus.sphere-sys.co.jp  (EMWAC SMTPRS 0.83) with SMTP id 
<B0000098346(_at_)venus(_dot_)sphere-sys(_dot_)co(_dot_)jp>;  Wed, 31 Jan 2001 
08:54:59 +0900
Message-id: <B0000098346(_at_)venus(_dot_)sphere-sys(_dot_)co(_dot_)jp>
X-procmail: unwanted ordinary tag-contents header TDS
Content-length: 1328
X-procmail: unwanted ordinary tag-contents header TDS
Subject: UNLIMITED LEADS 4 U $$$$$$$$
From: fAMVW9rq6(_at_)turbomail(_dot_)net
Date: 30 Jan 01 6:51:34 PM (Tue 18:51 MST)
To: okbiz(_at_)china(_dot_)com
--------------------------------------------------------

Here are relevant portions of my .procmailrc:
--------------------------------------------------------
########################################################################
#Apply spam-catcher rules from:
#   http://alcor.concordia.ca/topics/email/auto/procmail/spam/
tag_dir=/home/mcmaster/spamtools
INCLUDERC=$tag_dir/tag
INCLUDERC=$tag_dir/tag-contents
INCLUDERC=$tag_dir/tag-radical
INCLUDERC=$tag_dir/delete.procmailrc
--------------------------------------------------------

Here is /home/mcmaster/spamtools/delete.procmailrc:
--------------------------------------------------------
#<HTML>
#<BASE HREF="http://alcor.concordia.ca/topics/email/auto/procmail/spam/";>
#<PRE>
#
# spam/delete "procmailrc" file
#
# TO USE THESE RECIPES, put
#    INCLUDERC=/local/etc/procmail/spam/delete
# into your "main" procmail file (after the tag file).
#
# This file will junk any mail that has been tagged with
# a tag indicating that the message is unwanted.
#
# 1996/06/04 Anne Bennett
#   - Initial coding
#
# ----------- "spam" series configuration done in "spam/tag"

VERBOSE=1
:0 H:$MAILDIR/trash/.lock
*^$trash_header
| /home/mcmaster/bin/rcvstore -nounseen +trash
VERBOSE=0
--------------------------------------------------------

Finally, here is the log file:
--------------------------------------------------------
procmail: [8831] Tue Jan 30 16:50:23 2001
procmail: No match on "^$trash_header"
procmail: Assigning "VERBOSE=0"
 SUBJECT: UNLIMITED LEADS 4 U $$$$$$$$
  Folder: /home/mcmaster/lib/rcvstore +inbox                               
2931
--------------------------------------------------------

Can anyone tell me why there is no match on $trash_header?  I suspect I am 
being stupid, but cannot see the problem.

Thank you

-- 
Jim McMaster
mailto:mcmaster(_at_)falcon(_dot_)stortek(_dot_)com



_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>