I've been using Procmail with Mutt for a few months, but only with the
simplest of recipes that I pulled from helpful websites.
I'd now like to take a crack at a recipe to trash this persistent spam
that I keep getting as the default nobody at a website I maintain.
Spammers harvest this legitimate address from our site, and send spam to it
in the form as appended below.
Problem is that every time it's a different subject and from a different
sender (including TLD), so as a Procmail newbie, I'm hard put to come up
with a recipe. The only common elements seem to be the To: address
(which I don't want to block as we do get legitimate mail at this
address) and the fact that the message body is always as below, which
seems to be pages of encoded html or a picture?
Anyway, I'd appreciate any pointers on how to start a recipe for
filtering this.
Thanks
Kevin
From: sales <sales(_at_)chponline(_dot_)com>
Subject: A special excite game
To: camps(_at_)triathlonacademy(_dot_)com
Content-Type: application/octet-stream;
name=popup[1].htm
Content-Transfer-Encoding: base64
Content-ID: <YkU575Ey93M04Vs3>
DQo8IS0tIENvcHlyaWdodCAoYykgMjAwMCBBdCBIb21lIENvcnBvcmF0aW9uLiBBbGwgcmln
aHRzIHJlc2VydmVkLiBCdWlsZCAxNzAyIC0tPg0KDQoNCg0KDQo8QVBQTEVUIE1BWVNDUklQ
VCBjb2RlPWNpZDIxMTQwMmRlbHRhZGFuY2UuY2xhc3MgY29kZWJhc2U9Imh0dHA6Ly9hZHMu
ZW5saXZlbi5jb20vamF2YS92NyIgYXJjaGl2ZT0iY2lkMjExNDAyZGVsdGFkYW5jZS5jYWIs
ZW5saXZlbi5jYWIiIG5hbWU9ImFkMTk2Mjc4NDMzX2VubGl2ZW4iIHdpZHRoPTQ2OCBoZWln
etc .....
--
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail