procmail
[Top] [All Lists]

could this message be bypassing procmail?

2002-05-03 07:25:29
i've recently set up a .procmailrc to store possible spam into a different
folder.  It's working very well except for some reason it always delivers
messages from smtp.experience.com to my default maildir, apparently no
matter what i do with my recipies.  These messages are addressed from
a small number of false addresses at my school so i've tried recipies that
look for those addresses.  I've also tried recipies that look for the
familiar experience.com in any part of the headers.  Other similar
recipies pertaining to mail from other servers are workign fine and
strangely, althoguh i have verbose logging on, there's never any mention
of these e-mails in the log.

This spam might be somehow affiliated with the carreer center at my
school.  Is there a possibility that they're somehow coming through the
mail delivery system in a different way from most mail, or am i just
getting the recipies wrong?

here's one recipe i've been using and an example of a header i hoped to
catch with it.  I tried matching shorter patterns from the header but for
no good reason except that i thought it couldn't hurt to try, i've now got
this unnecessarily long one:

:0:
* ^Received:.*from.*smtp\.experience\.com
$SPAMFOLDER

i also have it looking for cfavre(_at_)gustavus(_dot_)edu and anything 
containing
jumpgate.experience.com

and this is one of the headers i want to catch:

Return-Path: <cfavre(_at_)gustavus(_dot_)edu>
Received: from smtp.experience.com (jumpgate.experience.com
    [64.94.244.10])
        by solen.gac.edu (8.9.3/8.9.3/GAC-HUB-2.43) with ESMTP id
    PAA09293
        for <handerso(_at_)gustavus(_dot_)edu>; Wed, 1 May 2002 15:35:06 -0500 
(CDT)
Received: from xpen-services2.experience.com
    (IDENT:root(_at_)xpen-services2(_dot_)experience(_dot_)com [10.50.0.95])
        by smtp.experience.com (8.11.6/8.11.6) with ESMTP id g41KKHE19315
        for <handerso(_at_)gustavus(_dot_)edu>; Wed, 1 May 2002 16:20:17 -0400
Message-ID:
    
<3200848(_dot_)1020285308914(_dot_)JavaMail(_dot_)root(_at_)xpen-services2(_dot_)experience(_dot_)com>
Date: Wed, 1 May 2002 16:35:08 -0400 (EDT)
From: cfavre(_at_)gustavus(_dot_)edu
To: handerso(_at_)gustavus(_dot_)edu
Subject: Last Job Search Workshop!
Mime-Version: 1.0
Content-Type: multipart/mixed;
        
boundary=3246427.1020285308913.JavaMail.root.xpen-services2.experience.com

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>