procmail
[Top] [All Lists]

*****SPAM***** Some emails baypass Recipe

2003-10-16 00:02:09
Hi there,
Sometimes an email bypases the recipe, and when I forward the email again to myself the recipe captures it! For example a message had a word prescriptions or Enlargement or Penis in the Body of the message did bypass my recipe even though I am filtering those words in the recipe BUT when I reply or forward those messages to my email they get filtered.

Here is my recipe part where  I filter for bad emails:
:0HB
* .*penis|.*p-e-n-i-s|.*p,e,n,i,s|.*enlargement|(_dot_)*vi(_at_)gr@|.*v-i-a-g-r-a|(_dot_)*v-i-(_at_)-g -r-@|.*v,i,a,g,r,a|.*viagra|.*v1agra|.*v i a g r a|.*fuck|.*tits|.*suck|.*vicodi n|.*prescription|.*horny|.*amateur|.*XXX|.*pharmacy|.*pussy|.*sex|.*\<debt elimi
nation\>|.*\<young girl\>|.*\<teen girl\>|.*\<bang gang\>
/dbc/Procmail/bad_Emails

Here the log file:
This log for a message that included the word Presscription in the body
procmail: [16020] Tue Oct 14 10:56:04 2003
procmail: Assigning "MAILDIR=/usr/spool/mail/"
procmail: Assigning "MYVIRUS=/home/jacoub"
procmail: Assigning "INCLUDERC=/home/jacoub/rc.BadFilter"
procmail: Assigning "SHELL=/bin/sh"
procmail: Assigning "SPACE= "
procmail: Assigning "TAB=       "
procmail: Assigning "WS=        "
procmail: Assigning "DQ=""
procmail: Assigning "GO=9876543210"
procmail: Assigning "STOP=-9876543210"
procmail: Assigning "MYVIRUS=/home/jacoub/Attachments"
procmail: Assigning "VFROM"
procmail: Assigning "MATCH="
procmail: Matched ""Angelica Church" <vwby9bseks(_at_)msn(_dot_)com>"
procmail: Score: 2147483647 2147483647 "^From:[         ]+\/.*"
procmail: Assigning "VFROM="Angelica Church" <vwby9bseks(_at_)msn(_dot_)com>"
procmail: Assigning "MATCH="
procmail: Matched "multipart/alternative"
procmail: Match on "^Content-Type:.*\/[^        ][^;]+"
procmail: Assigning "CTYPE=multipart/alternative"
procmail: Assigning "NASTYEXT=(exe|com|bat|hta|pif|scr|shs|vb[se]|ws[fh]|(doc|txt|xls)\.)" procmail: Score: 0 0 "^Content-[^ ]+:.*="?[^"]*\.(exe|com|bat|hta|
pif|scr|shs|vb[se]|ws[fh]|(doc|txt|xls)\.)"
procmail: Score:       0       0 ! "^^multipart"
procmail: Score:       0       0 "^Content-[^   ]+:.*($[        ].*)*=[
]*($[ ]+)*"?[^"]*\.(exe|com|bat|hta|pif|scr|shs|vb[se]|ws[fh]|(doc|txt|xls)\.)"
procmail: No match on "> 50000"
procmail: No match on ".*^A^A^A"
procmail: No match on ".*penis|.*p-e-n-i-s|.*p,e,n,i,s|.*enlargement|(_dot_)*vi(_at_)gr@|.* v-i-a-g-r-a|(_dot_)*v-i-(_at_)-g-r-@|.*v,i,a,g,r,a|.*viagra|.*v1agra|.*v i a g r a|.*fuck|.
*tits|.*suck|.*vicodin|.*prescription|.*horny|.*amateur|.*XXX|.*pharmacy|.*pussy
|.*sex|.*\<debt elimination\>|.*\<young girl\>|.*\<teen girl\>|.*\<bang gang\>"
procmail: Locking "/var/spool/mail/jacoub.lock"
procmail: Assigning "LASTFOLDER=/var/spool/mail/jacoub"
procmail: Opening "/var/spool/mail/jacoub"
procmail: Acquiring kernel-lock
procmail: Unlocking "/var/spool/mail/jacoub.lock"
>From vwby9bseks(_at_)msn(_dot_)com  Tue Oct 14 10:56:04 2003
Subject: 1/2 Off All Perscript1on Meds..........    [
 Folder: /var/spool/mail/jacoub

This log for a message that included the word Penis and Enlargement in the body
procmail: [11459] Tue Oct 14 10:34:13 2003
procmail: Assigning "MAILDIR=/usr/spool/mail/"
procmail: Assigning "MYVIRUS=/home/jacoub"
procmail: Assigning "INCLUDERC=/home/jacoub/rc.BadFilter"
procmail: Assigning "SHELL=/bin/sh"
procmail: Assigning "SPACE= "
procmail: Assigning "TAB=       "
procmail: Assigning "WS=        "
procmail: Assigning "DQ=""
procmail: Assigning "GO=9876543210"
procmail: Assigning "STOP=-9876543210"
procmail: Assigning "MYVIRUS=/home/jacoub/Attachments"
procmail: Assigning "VFROM"
procmail: Assigning "MATCH="
procmail: Matched ""Myles R. Nix" <mylesnixdk(_at_)email(_dot_)cz>"
procmail: Score: 2147483647 2147483647 "^From:[         ]+\/.*"
procmail: Assigning "VFROM="Myles R. Nix" <mylesnixdk(_at_)email(_dot_)cz>"
procmail: Assigning "MATCH="
procmail: Matched "text/html"
procmail: Match on "^Content-Type:.*\/[^        ][^;]+"
procmail: Assigning "CTYPE=text/html"
procmail: Assigning "NASTYEXT=(exe|com|bat|hta|pif|scr|shs|vb[se]|ws[fh]|(doc|txt|xls)\.)" procmail: Score: 0 0 "^Content-[^ ]+:.*="?[^"]*\.(exe|com|bat|hta|
pif|scr|shs|vb[se]|ws[fh]|(doc|txt|xls)\.)"
procmail: Score: -2147483647 -2147483647 ! "^^multipart"
procmail: No match on "> 50000"
procmail: No match on ".*^A^A^A"
procmail: No match on ".*penis|.*p-e-n-i-s|.*p,e,n,i,s|.*enlargement|(_dot_)*vi(_at_)gr@|.* v-i-a-g-r-a|(_dot_)*v-i-(_at_)-g-r-@|.*v,i,a,g,r,a|.*viagra|.*v1agra|.*v i a g r a|.*fuck|.
*tits|.*suck|.*vicodin|.*prescription|.*horny|.*amateur|.*XXX|.*pharmacy|.*pussy
|.*sex|.*\<debt elimination\>|.*\<young girl\>|.*\<teen girl\>|.*\<bang gang\>"
procmail: Locking "/var/spool/mail/jacoub.lock"
procmail: Assigning "LASTFOLDER=/var/spool/mail/jacoub"
procmail: Opening "/var/spool/mail/jacoub"
procmail: Acquiring kernel-lock
procmail: [11459] Tue Oct 14 10:34:14 2003
procmail: Unlocking "/var/spool/mail/jacoub.lock"
>From mylesnixdk(_at_)email(_dot_)cz  Tue Oct 14 10:34:13 2003
Subject: ;M:en - ,*Boo*st yo,ur. :;co"nfi'dence le;vels`* _ fxyhsudiqy
 Folder: /var/spool/mail/jacoub
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail
<Prev in Thread] Current Thread [Next in Thread>