procmail
[Top] [All Lists]

Re: stuff getting through my spam filter

2006-09-09 11:49:36
Hi.

09Sep2006 @ 02:16 Google Kreme thusly spake
On 08 Sep 2006, at 21:05 , Luke Vanderfluit wrote:

Lines: 40

Everything before this line is part of the headers.  After this is  
what appears to be a blank line, so the end of the headers.

Something is adding a malformed Message-id header to your message  
which appears to be also causing a line feed to break your headers.

It's not the original message, which has no message-id header at all.

How are you getting the mail from the popfile to your inbox?  you're  
leaving something out in the process, and that's where the problem is.


This is right.
The breaking of the headers only happens with a few spam emails and all of them 
have similar addresses, so I'm assuming there is something in those emails that 
causes this behaviour.
What's the U+FEFF in '<U+FEFF>Message-ID:' mean? This is just after the 'Lines: 
40' header.
Is this maybe some UTF code that causes mutt to bork.


I'm using fetchmail which uses a poll command that is prescribed by popfile:
from my .fetchmailrc:
/~~~~~~~~~~~~~~~~~~~~
poll 127.0.0.1 protocol pop3 username "mail.server.ip.address:<username>" 
password "<password>"
\____________________

then procmail does it's work to sort mail into the appropriate mailbox.
recipe for spam:

/~~~~~~~~~~~~~~~~~~~~~
:0:
* ^X-Text-Classification: spam
spamMail
\_____________________

Then mutt does it's stuff.

What do you think?

Kind regards.
Luke Vanderfluit.



-- 
"Queen Isabella and King Ferdinand kicked 200,000 Jews out of Spain,  
one of the first acts of the Spanish Inquisition, which no one ever  
expects. " John Carroll's 21st Annual Xmas Quiz answers



____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail


-- 
............._..
.|  .| |.|/.|_ .
.|__.|_|.|\.|_ .
:61 421 276 282:

____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail