On Fri, 2 Sep 2005, Louis Proyect wrote:
I put this into my procmail recipes:
:0 B
* ^Content-Type: text/html
* ^Content-Transfer-Encoding: base64
/users/lnp3/mail/base64
But I am still getting the p*nny st*ck spam I described the other day. Can
anybody spot anything wrong with the recipe?
Also, I wonder how one can identify such base64 encoded messages. I was
looking at Rick Conner's extremely useful write-up on spam at
http://www.rickconner.net/spamweb/analysis01.html yesterday where I
discovered that the base64 indicator is in the *body* of the email rather
than the header--I had been looking at :0 H. But how would you find this
information? First of all, by the time it gets to Eudora, you will have no
such indication. On the other hand, if I use Pine on panix.com's server, I
can only "Show headers". How would I show indicators of special encoding
from within Pine, like base64?
I'm not sure what do you mean "show indicators" but in pine
you can pipe the message to less, from the message, do:
| Pipe
^W Control+W togle to see the message as-is
less For less
Bye,
Udi
____________________________________________________________
procmail mailing list Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail