I love procmail (at least as much as I understand it) and
I'm trying to find a way to filter out spam that is addessed to
repeating addresses such as
To:
<postmaster(_at_)example(_dot_)com>,<postmaster(_at_)example(_dot_)com>
Cc:
<postmaster(_at_)example(_dot_)com>,<postmaster(_at_)example(_dot_)com>
and/or
To: <samename(_at_)example(_dot_)com>,<samename(_at_)example(_dot_)com>
Cc: <samename(_at_)example(_dot_)com>,<samename(_at_)example(_dot_)com>
where example.com is actually a number of different domains.
I tried (condition is all on one line) the following:
# ~~~~~ condition line wraps -- sorry!
:0
^(To|Cc):.*<postmaster@([-a-z0-9_]+\.)+\.(com|net|org)>,.*<postmaster@([-a-z0-9_]+\.)+\.(com|net|org)>,
.*<postmaster@([-a-z0-9_]+\.)+\.(com|net|org)>
! mailbox(_at_)example(_dot_)com
# ~~~~~
but that somehow created a new mailbox with the name of the
complete condition line, which was very interesting ... looking
back, I'd change the com/net/org to three or four alpha but I'm
still confused as to why it created and delivered to that strange
mailbox.
I'm now thinking that I should use scoring to better
capture emails with 4 (or some number) or more occurances of
these types of To/Cc addresses but I'm a bit stumpted.
Would someone be so kind as to point me in the right
direction for this, hopefully a direction with few potholes.
TIA,
- Don
PS: my sincere thanks to the regular posters to this list, as a
lurker I've really learned (and used) a lot from following the
flow.
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail