procmail
[Top] [All Lists]

Re: filter based on "From: " content

2020-11-17 06:39:55

Are you saying that something like

 :0
 * ^From:.*joe(_at_)mysite(_dot_)org
 * ^To:.*joe(_at_)mysite(_dot_)org
 spam

would not work?

On Mon, 16 Nov 2020, Zhiliang Hu wrote:

Recently I get lots spam mails typically with faked "From:" and "To:" like

  From: "joe(_at_)mysite(_dot_)org" <extusr(_at_)water(_dot_)ne(_dot_)jp>
  To: joe(_at_)mysite(_dot_)org

where "joe(_at_)mysite(_dot_)org" is our local user.  My problem with 
procmailrc approach
is that 'formail' extraction will largely leave out the
"joe(_at_)mysite(_dot_)org" part in the "From:" line. Before I may attempt an 
external
script to do the catch, I wonder is there already, or possibly some simple
filter to catch these within procmailrc?

Zhiliang
____________________________________________________________
procmail mailing list -- procmail(_at_)lists(_dot_)rwth-aachen(_dot_)de   
Procmail homepage:
http://www.procmail.org/
To unsubscribe send an email to 
procmail-leave(_at_)lists(_dot_)rwth-aachen(_dot_)de
https://lists.rwth-aachen.de/postorius/lists/procmail.lists.rwth-aachen.de


____________________________________________________________
procmail mailing list -- procmail(_at_)lists(_dot_)rwth-aachen(_dot_)de   
Procmail homepage: http://www.procmail.org/
To unsubscribe send an email to 
procmail-leave(_at_)lists(_dot_)rwth-aachen(_dot_)de
https://lists.rwth-aachen.de/postorius/lists/procmail.lists.rwth-aachen.de

<Prev in Thread] Current Thread [Next in Thread>