On Tue, Jul 15, 2003 at 10:31:44AM -0500, Jack L. Stone wrote:
Am running Procmail v3.22 on FBSD-4.8 with SpamAssassin-2.55 and
Sendmail-8.12.8p.
I've seen procmail recipes on identifying suspicious sender emails
using all numbers, but mamny if not most of those now have a mixture
of alpha/numeric user names, like these two in a row:
ygciw651nk(_at_)hotmail(_dot_)com
czlpxgyf1(_at_)yahoo(_dot_)com
I would appreciate help on a procmail recipe that would identify the
above type of sender (From), but only if they exceed 6 digits. The 5-6
digits with a mixture of alpha/numeric are probably okay since many of
our emails come from radio operators with their unique FCC callsigns
which are typically 5-6 digits.
You also have to watch out for CompuServe addresses. But I have
very good luck mistrusting local addresses with four or more numbers
at the *end*.
Scoring is ideal for what you want. See `man procmailsc'.
Here is a recipe set:
:0 # in brackets is caret, space, tab, @
* ^From:(.*\<)?\/[^ @]+
{ LOCALPART = $MATCH }
:0
* -6^0
* 1^1 LOCALPART ?? [0-9]
{ do something with the mail }
--
dman
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail