# junkfilter
# a junk email filter system for procmail
# Copyright 1997-2002 Gregory Sutter <gsutter@zer0.org>
#
# $Id: junkfilter.two,v 2.16 2002/04/21 03:20:37 gsutter Exp $
#
# Please read the file "README" and the page
# http://junkfilter.zer0.org/ before using junkfilter.

# Section Two, reasonable spam-catching recipies

JFSEC=2

# Invalid X-UIDL header, contains non-displayable characters.
# This rule is pretty lame.
:0
* ^X-UIDL:
* $ !^X-UIDL:[ 	]*${JFPCHAR}+[ 	]*$
{ JFMATCH="$JFSEC: Invalid X-UIDL" INCLUDERC=$JFDIR/junkfilter.match }

# New bad-AOL filter.
:0
* $ ^From:\/(.*[^-(.%@a-zA-Z0-9])?[^@<>,        ]+@aol\.com\>
* $ ! ^From:(.*[^-(.%@a-zA-Z0-9])?([^a-z]|.+[^0-9a-z]|............).*@aol\.com\>
{ JFMATCH="$JFSEC: Forged AOL account: $MATCH" INCLUDERC=$JFDIR/junkfilter.match }

# Hotmail mails all have this header
# note, I'm assuming you're not reading this mail at hotmail.com :)
# commented out 20020308 for lots of false matches.  can it be fixed?
#:0
#* $ $JFFROM.*hotmail.com
#* $ ! ^X-Originating-IP:$JFWS\[$JFIPNUM\.$JFIPNUM\.$JFIPNUM\.$JFIPNUM\]
#{ JFMATCH="$JFSEC: Forged hotmail.com address" INCLUDERC=$JFDIR/junkfilter.match }

# Checks date.  Because -0600 is either CST, MDT, or water, NOTHING should
# ever have a time-zone of "-0600 (EST)".
:0
* ()\/^(Date|Received):.* -0600 \(EST\)
{ JFMATCH="$JFSEC: Invalid datestamp: $MATCH" INCLUDERC=$JFDIR/junkfilter.match }

# Empty headers don't belong.
:0
* ^\/(From|To|Reply-To):[ 	]*("")?[ 	]*[<>]*[ 	]*$
{ JFMATCH="$JFSEC: Empty header: $MATCH" INCLUDERC=$JFDIR/junkfilter.match }

JFSEC

# EOF junkfilter.two