Chris Wagner <ismgr(_at_)atchisonkansas(_dot_)net> wrote:
[...]
0 B
*^Content-Type: (application|audio)
*^.*name=.*.(vb[esx]|ws[hf]|c[ho]m|bat|cmd|hta|exe|lnk|pif|dll|scr|shs|zip)
! spambox-ismgr(_at_)atchisonkansas(_dot_)net
Does procmail look to meet both conditions in this recipe, or
will one qualify the message to it and then get dumped?
The reason I ask is that we have had many users try to email
information and files to users on the system and they have
been routed to the user's spambox, even when it didn't seem to
have any content that violated the recipe.
The 2nd rule looks like it might match all sorts of things with
"<anything>name=<anything>(vb[esx]|ws[hf]|c[ho]m|bat|cmd|hta|exe|lnk|pif|dll|sc
r|shs|zip)>. Wouldn't that match "My name=Pinheaded Zippy"? If so, any message
with an application-type attachment and that text would hit, no?
Do the messages all have attachments, and "name=" in the body at all? If so,
perhaps it's an overly broad regexp. I suspect that the false positives are all
messages with attachments.
[...]
- Bob
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail