"David W. Tamkin" <dattier(_at_)ripco(_dot_)com> writes:
:0 # if over threshold, register size as a score
* > 500000
* 1^1 > 1
{
SIZE = $=
MATCH
:0
* ^\/From:.+
{ }
LOG="Huge item received: $SIZE bytes
${MATCH-without a From: header}
"
LOGABSTRACT=all
:0:
$TRASH
}
Thanks for the insight, guys; I know a lot more about scoring
than I did. One last question, though, what's the meaning of
the "${MATCH-without a From: header}" construct? I'm quite
familiar with $MATCH, but I haven't seen that augmentation.
Is that syntax from a newer procmail? (we're still using
3.10 here at my ISP, and I've got 3.13 at home) FWIW, I
log the From: line because the From_ line is from smartlist,
and not as interesting as the author of the huge thing.
Cheers,
Jim
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail