procmail
[Top] [All Lists]

detecting missing "From:", spam

2005-07-25 14:13:58
I have read with interest the recent discussion on calling procmail from  
the command line to generate test email messages.  One thing is not clear  
to me: Isn't it true that any command line invocation of procmail to  
deliver mail will automatically insert a "From:" header?  I could check  
this myself, but not until this evening.

Like many of those on this list (I presume), I am using procmail as part  
of a spam control scheme.  Unlike Ged and many others here, I do not have  
direct control over my server computer.  I cannot reject mails before they  
are handed to procmail.  To fight spam I have to rely on what I an do with  
procmail and other tools like perl.

My system is whitelist/blacklist-based.  It is essentially a  
challenge-response system with automatic whitelisting depending on  
keywords in the subject, body, or "To:" header.  There is also a special  
whitelist that uses egrep to match on domain names, so I can whitelist an  
entire domain.  I am still developing my system, but I have it working,  
and I am very pleased.

My system sends out a "challenge" email in response to every rejected  
email, and rejected mails are sent to /dev/null.  I know this eats up  
bandwidth, but it at least eats up bandwidth on the computer that sent the  
spam, too.  Maybe this is indeed better than just silently dumping the  
message with no "challenge" message.

I would like to hear what others on this list think of how to best  
implement spam blocking (as opposed to filtering) with procmail.  (Would  
this be off-topic?)

--
Lloyd
(If contacting me for the 1st time, please include "Standish" in message  
subject or body.)

____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>