# junkfilter # a junk e-mail filter system for procmail # Copyright 1997-98, Gregory Sutter # and Matthew Hunt # # Please read the file "junkfilter.readme" and the page # http://www.pobox.com/~gsutter/junkfilter/ before using # junkfilter. junkfilter is copyright 1997-98 Gregory # Sutter and Matthew Hunt. All rights reserved. # Section Three, recipes that catch some legitimate mail. JFSEC=3 # Has this mail originated from a common spam dialup and been delivered # directly to the recipient's domain? :0 * $ ^Received:[ ]from.*$JFDIALUPS.*by.*$JFMAILDOM.*for { JFEXP="$JFSEC: Dialup direct spam" } # AOL, Hotmail, Juno, USA forged From: headers. Note the space at the end # of the last line. :0 * ^From:.*@\/((hotmail|juno|aol).com|usa.net) * ! ^(Received|Message-Id):.*(((hotmail|juno|aol).com|usa.net) ) { JFEXP="$JFSEC: Forged From: header from $MATCH" } # number@, @number.com or number@number.com address : spam. # almost. additions made to the exception list only as necessary. :0 * ()\/^From:.*\<([0-9]+@|@[0-9]+\.com) * !^From:.*@((1776|2600|mcimail)\.com|brookes\.ac\.uk)\> * !^From:.*\<[0-9][0-9][0-9][0-9][0-9][0-9]\.[0-9][0-9][0-9][0-9]@compuserve\.com { JFEXP="$JFSEC: Numbers at numbers: $MATCH" } JFSEC # EOF junkfilter.three