OK, how about:
:0
* ^To:.*postmaster@
* ^Cc:.*postmaster@
! mailbox.example.com
To catch when both to & cc fields have "postmaster@"
Or,
:0
* ^To:.*postmaster@
{
:0
{
WHOTO=`formail -z -xTo:`
COUNT=`echo ${WHOTO} | sed -e 's/[^(_at_)]//g' | wc -c`
COUNT1=`expr ${COUNT} - 1`
ISGT=`expr ${COUNT1} \> 9`
}
:0
* ISGT ?? ^^1^^
! mailbox.example.com
}
This may need to be tweaked a bit, but if the "To:" field contains
"postmaster@",
we'll count the number of "To" recipients, and forward if the count is
10 or more.
procmail(_at_)deliberate(_dot_)net wrote:
On Tue, 18 Jun 2002 17:20:09 -0400, Mark_Saunders
<Mark_Saunders(_at_)piucorp(_dot_)com> wrote:
=> :0
=> * ^(To|Cc):.*postmaster@
=> ! mailbox.example.com
=> Wouldn't this accomplish what you want?
=> procmail(_at_)deliberate(_dot_)net wrote:
=> > I'm trying to find a way to filter out spam that is addessed to
=> > repeating addresses such as
=> > To:
<postmaster(_at_)example(_dot_)com>,<postmaster(_at_)example(_dot_)com>
=> > Cc:
<postmaster(_at_)example(_dot_)com>,<postmaster(_at_)example(_dot_)com>
Thanks but your suggestion would grab *every* email with
a To/Cc addreessed to some postmaster@ while I still want to be
able to receive postmaster traffic just discard those messages
that are sent to 4 or 5 postmasters in a lump, those which are
clearly (and I assume to be) spam.
Cheers,
- Don
ps: please post replies to mailing list only, if possible
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail
--
mv $win /dev/null
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail