Recipe Help.

I have a basic recipe that I am trying to get some os the spam that uses
a dsl connection as an email server, and want to quarantine it until I
check to see if it is spam or not, whitelist the legitimate ones and
leave the rest as spam.



Here is the recipe.


## Client DSL running SMTP servers.
:0
* ^Received:[ ]from[ ].dsl
* ! ^Subject: FW:
* ! ^Subject: RE:
 {
        LOG="SPAM: Received: header indicates an DSL SMTP$NL"

        :0:
        $QUARANTINE
}



This catches 
Received: from adsl-smtp804.mail.ukl.yahoo.com (some IP address)

But the problem is it also catches any Received header that has such a
text, I want to force to check only the first Received header, how can I
achieve that?

To explain further, if someone sends an email through his email server
and his email server is in the first Received: header, but his email
server also will write his connection and that will be in the second or
third Received: header, that is not what I want to filter.




Thank your for your time and help.



_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail