In article
<20170814000641(_dot_)23914(_dot_)qmail(_at_)gw(_dot_)johncon(_dot_)com> you
write:
RFC 822 is specific about folded white space:
From: Someone else <someone(_at_)someplace(_dot_)com>,
Joe Blow <joe(_at_)examp1e(_dot_)com>
is perfectly valid, and often used in short mailing lists,
particularly in project management full text information retrieval
systems.
This has come up in IETF mailing lists, particularly the question of
From: lines with multiple addresses. If you see more than %0.00001 of
mail with more than one address in the From: line, your mailstream is
extremely unusual.
Additionally, 'From: ' is not secure since anyone can put
'From: Joe Blow <joe(_at_)examp1e(_dot_)com>' in any mail handler to send
mail. The
'Return-Path: ' is a better choice since it is machine generated.
They're both machine generated, albeit perhaps by different machines.
For an application line this, looking for mail from specific people
who send it directly from their own accounts, their From: lines will
be normal, and if you're worried about forgery, neither From: nor
Return-Path: is adequate without external security measures.
:0
*
^From:.*(susanmay21(_at_)iinet(_dot_)net(_dot_)au|billh(_at_)marsjourney(_dot_)info|mail@cchase
harwood.com|barry(_at_)barryjhutchison(_dot_)com|blake(_at_)blakebrivers(_dot_)com|help@boo
kfunnel.com|brandon(_at_)brandon-ellis(_dot_)com|brian(_at_)brianference(_dot_)com|cgockel@
cgockelwrites.com|contact(_at_)ccekeke(_dot_)com|jrobertsonwrites(_at_)gmail(_dot_)com)
$AUTHORS
____________________________________________________________
procmail mailing list Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)rwth-aachen(_dot_)de
https://mailman.rwth-aachen.de/mailman/listinfo/procmail