Toen ik Robert Krueger kietelde, kwam er dit uit:
This should eliminate all HTML messages
:0:
* ^Content-Type: text/html
blue-spam
Check the headers of any messages that you think should have been
caught. The Content-Type:header will no doubt be different.
[...] I continue to receive these
Viagra emails, about two every 12 hours, the latest of which I've posted
below.
:0 :
* B ?? (pr...|c...|p...|viagra)
red-spam
That reg.exp is far to broad. A dot matches any letter. Or did you
munge it? Better mention if you did.
Content-Type: text/plain
Content-Transfer-Encoding: base64
[...]
Buy Viagra and Cialas Aka "Super Viagra"..The Viagra that last all
weekend!.. and other popular medications. Next-Day Fedex
That body fragment doesn't look like base64-encoded plain-text.
I assume you copied the header and the body in two different ways
into your message to us.
To catch base64-encoded text with non-base64-encoded reg.exps won't
work. Either uncode the body first, or use reg.exps that actually
match what you receive.
Or just send any message with these headers
Content-Type: text/plain
Content-Transfer-Encoding: base64
to some color-spam-box, because it
sure is a silly combo.
:0:
* ^Content-Type:.*text/plain
* ^Content-Transfer-Encoding:.*base64
silly-spam
--
Affijn, Ruud
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail