######################################################################
ATTENTION ATTENTION ATTENTION ATTENTION ATTENTION ATTENTION
I am currently NOT in Strasbourg because I have the last
17 days of my military service and can not reply in short delays.
######################################################################
Am 2007-07-11 09:14:01, schrieb Scott Moseman:
Are there any good recipes for dealing with the latest PDF spams?
The following INCLUDERC had catched over 23.000 currently.
----[ '~/.procmail/FLT_pdf' ]-------------------------------------------
####################################################################
#
# FLT_pdf
#
####################################################################
:0 BHh
* -5^0
* 3^1 ^Subject:.*\.pdf
* 1^1 ^Content-Type:.*application/pdf
* 1^1 name=.*\.pdf
* 1^1 filename=.*\.pdf
.ATTENTION.FLT_pdf/
------------------------------------------------------------------------
and then it looks like:
----[ '~/log/procmail/2007-07-14.log' ]---------------------------------
################ NEW MESSAGE AT 2007-07-14 22:20:14 ################
(7659356) FLT_fromto : pass
(7659356) FLT_schrott : pass
(7659356) NET_pingbot : pass
(7659356) ML_debian : pass
(7659356) SPAMTAG : .debian
(7659356) FLT_oneword : 236 words
(7659356) FLT_pdf : pass
procmail: [26672] Sat Jul 14 22:20:15 2007
procmail: Score: -5 -5 ""
procmail: Score: 3 -2 "^Subject:.*\.pdf"
procmail: Score: 1 -1 "^Content-Type:.*application/pdf"
procmail: Score: 2 1 "name=.*\.pdf"
procmail: Score: 1 2 "filename=.*\.pdf"
procmail: Assigning
"LASTFOLDER=.ATTENTION.debian.FLT_pdf/new/1184444415.26672_0.samba3.private"
From
bounce-debian-arm=debian(_dot_)ml4michelle=freenet(_dot_)de(_at_)lists(_dot_)debian(_dot_)org
Sat Jul 14 22:20:14 2007
Subject: Fwd: cancelled_vziart.pdf
Folder: .ATTENTION.debian.FLT_pdf/new/1184444415.26672_0.samba3.priv 2860
------------------------------------------------------------------------
Greetings
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
50, rue de Soultz MSN LinuxMichi
0033/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
____________________________________________________________
procmail mailing list Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail