procmail
[Top] [All Lists]

Spam filter for detecting same name in From and Subject headers

2007-01-06 03:01:18
   How would I write a filter that would filter out messages where  
part of the From field matches the beginning of the Subject field?   
I've noticed a huge amount of spam in the following form:

From: "<x> Madrid" <indication'scoarser(_at_)abs-cbn(_dot_)com>
To: <jsylvest(_at_)indiana(_dot_)edu>
Subject: <x> wrote:

   Until the spammers update the bots (modify one of the words  
perhaps), it would seem such a filter to detect the 'From:\s"(.*) 
\s*Subject:\1\swrote' pattern or something like it..

   Sorry if this is an 'old hat' trick here..

Jim Witte

____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail