procmail
[Top] [All Lists]

Re: PDF spam

2007-07-19 12:43:03
Michelle Konzack schreef:

:0 BHh
* -5^0
*  3^1 ^Subject:.*\.pdf
*  1^1 ^Content-Type:.*application/pdf
*  1^1 name=.*\.pdf
*  1^1 filename=.*\.pdf
.ATTENTION.FLT_pdf/

That'll catch many good ones too. The Hh flags are bad, and unnecessary.


Sharper:

  $WS = "     "   # 2 characters: SP (ASCII-32) and TAB (ASCII-9)

  :0
  *$ Subject: (Emailing|Fwd|Re):.*\/[^$WS]*\.pdf$
  *  MATCH ?? ^^\/.*
  *$ B ?? ^Content-Type: application/pdf;\
          ^[$WS]+name=\"$\MATCH\"\
          ^(Content-.*)*\
          ^[$WS]+filename=\"$\MATCH\"^
  .ATTENTION.FLT_pdf/

(untested)

which also won't match them all, because they don't always have the
filename in the Subject.

Sometimes the Subject is (or maybe was) only "Fwd:" or "Re:" or
"Invoice" or "Report".

-- 
Groet, Ruud
____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>