On Tue, 18 Mar 2003 06:51:54 -0500, David Turley <dturley(_at_)pobox(_dot_)com>
wrote:
On Mon, 17 Mar 2003 23:49:46 -0800 Multimedia Fan
<multimedia-fan(_at_)myrealbox(_dot_)com>
wrote:
# check against whitelist
:0
* ? ($FORMAIL -x From: -x Sender: -x Resent-From: | $FGREP -iqf
$whitelist)
${DEFAULT}
But when I try similar recipe for a blacklisted body filtering.
# Check against blacklist
:0B
* ? ($FGREP -if $blacklist)
/var/log/spam/test-spam
I'm wondering why you don't use the same type of test in both cases, especilly
since you know the first works? Spammers addresses are going to be in the
headers, not the body. I can managed the majority of my mail with two rules.
(Although the catch the other 20%it takes several dozend more rules. :-)
#for the blacklist
* ? ($FORMAIL -x From: -x Sender: -x Reply-To: -x Received: | $FGREP -iqf
$SPAMMERS)
# for the whitelist
* ? ($FORMAIL -x From: -x Sender: -x Resent-From: | $FGREP -iqf $FRIENDS)
Hi David,
I would like to thank you, since it was your procmail samples that were
the ones I read and learned from.
As for my black list, the problem is I don't black list by the address
in the headers, since spammers are morphing these from one to another.
For that I am using SBL 's database
http://www.spamhaus.org/sbl/index.lasso
And then lookup whois arin.net's whois database to obtain the spammers
netblock and then use etc/mail/access to refuse emails.
For example.
# Custom Offers LLC
#YourMailSource.com/amazingofferings.com
216.109.73 550 Sorry, we do accept spam
I am trying to filter some words in the body of the message that we have
policy against and spammers who advertise their web sites.
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail