Re: Logging the To address

Phil Hilton wrote:

<> :0 B
<> * ^ *Content-Disposition: attachment;
<> * name=".*\.(pif|scr|bat|cmd|xex|dat)"
<> {
<>         LOG="$NL pif, scr, bat, cmd, xex, dat file$NL $TOADDRESS $NL"
<> 
<>         :0:
<>         pif-scr-bat-cmd-xex-dat-filename.txt
<> }

Stylistic point you may want to consider -- you will log this (the
first three lines are from whatever message came in before and are
there to illustrate what your logfile will look like):

  From {some address}  {some datestamp}
   Subject: {whatever}
    Folder: {somewhere}

   pif, scr, bat, cmd, xex, dat file
   To: Phil Hilton <whatever_was_in_the_To:_header_line(_at_)wherever(_dot_)com>
  From some_virus_spoofed_address(_at_)some(_dot_)domain  {some later datestamp}
   Subject: {whatever}
    Folder: /path/to/maildir/pif-scr-bat-cmd-xex-dat-filename.txt
  From {some other address}  {some other datestamp}
   Subject: {whatever}
    Folder: {somewhere}

I presume you're using the initial newline to offset this entry from
the previous delivery record but do you really want that initial space
in there?

LOG="${NL}pif, scr, bat, cmd, xex, dat file${NL}${TOADDRESS}${NL}"

Or perhaps

LOG="${NL}**>pif, scr, bat, cmd, xex, dat file${NL}${TOADDRESS}${NL}"

Reto
-- 
R A Lichtensteiger              rali(_at_)tifosi(_dot_)com

You know you are on too many mailing lists when xbiff starts sounding
like a pinball machine ...

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail