On Wed, 6 Sep 2006, Luke Vanderfluit wrote:
Hi All.
I'm sure some of you have probably been hit by this.
I have a spam filter (popfile) that tags spam with 'Subject: [Spam]'
Recently some clever hackers have sent me emails that procmail puts in my Inbox
despite them having that header.
The headers of these emails look something like this and have the
'&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&Message-ID:'
header:
/~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Wed, 6 Sep 2006 16:30:18 +0930
From: gene_wise_wi(_at_)starmine(_dot_)com
??
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&M
essage-ID: <007b01c6d1e5$72784b40$425a45ca@@starmine.com>
From: "Gene Wise" <gene_wise_wi(_at_)starmine(_dot_)com>
To: luke(_at_)chipcity(_dot_)com(_dot_)au
Subject: [spam] Attention Penny St00ck Players
Date: Wed, 06 Sep 2006 14:51:22 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Tranfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Text-Classification: spam
X-POPFile-Link: http://127.0.0.1:8080/jump_to_message?view=78232
\____________________________________
Is there a recipe I can use to stop these?
Something like:
:0 D
* ^.*Message-ID:.*
spamMail
I not understand but I have the feeling that you want to
change the rule:
* ^.+Message-ID:
To be precise:
* ^&+Message-ID:
No need for '.*' at end of line because '.*' means:
anything (exept NewLine) or nothing.
Bye,
Udi____________________________________________________________
procmail mailing list Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail