procmail
[Top] [All Lists]

Re: anti-gifspam

2006-11-10 13:50:03
Ruud H.G. van Tol schreef:
Ruud H.G. van Tol:

http://www.xs4all.nl/~rvtol/procmail/.procmailrc.anti-gifspam
I tested it a bit more, and the version that starts with the line
# $Id: .procmailrc.anti-gifspam 2006-11-09 15:08 $
does what I meant it to do.

Or newer... :)

An over-simplified version:

  :0
  * 1^1 ^Received:
  { } N_RCVD = $=

  :0
  *$ ^Content-Type: multipart/related;.*\
                    boundary=(\")?\/[^\"]+
  { H_CTB = $MATCH }

  :0
  *  N_RCVD ?? ^^[1-3]^^
  *  B ?? src=(3D)?\"cid:\/[^\"=]+
  *$ B ?? ^--$\H_CTB\
          ^Content-Type: image/gif;\
          ^[  ]+name=\"[^\"]+\.gif\"\
         (^Content-Transfer-Encoding: base64)?\
          ^Content-ID: <$\MATCH
  .in.suspect/

(where of course [  ] contains a space and a tab)

This will catch most messages with html-code that refers to an attached
gif.

-- 
Groet, Ruud


____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>