I agree with Alan that purported source addresses are worthless in identifying
spam. Subjects, maybe; bodies and falsified routing, definitely.
I evaluate a range of IP address known to be used by those who like to send me
'optin' email. I use procmail to put it in a spam folder which I open and
forward to the applicable hosting service or common carrier. As an activist I
attract a lot of lightning. :)
Not able to check the man pages easily just now, I do believe that
^FROM_MAILER does not include "owner" or "bounce," so you might want to use
that instead.
Yes just before your helpful suggestion I did find ^FROM_MAILER and have
implemented it. Will see how it reacts from the two spammers that use owner and
bounce.
If you want to come up with your complete homebrew regexp, by
all means do. Then you can use it like this:
FROMADAEMON="whatever_you_put_here"
and in recipes,
:0
* $ ! $FROMADAEMON
whatever
Thanks for the regexp idea.
John
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail