On Thu, 11 Dec 2003 10:50:16 -0500, Mitchell Baker <[EMAIL PROTECTED]> posted to spamassassin-talk: > What I want to do is skip an message that originates from our domain... > I have the following in the /etc/procmailrcfile: > :0: > * [EMAIL PROTECTED] > ${DEFAULT} > # From system.rose-hulman.edu > :0: > * [EMAIL PROTECTED] > ${DEFAULT}
A few comments. 1. By delivering to DEFAULT from /etc/procmailrc you are not allowing your users to have their own .procmailrc do any further sorting of matching messages. Maybe this is not a problem. 2. You should not rely on the assumption that spammers will not manage to figure out how to forge in a header which lets them get in. Maybe your MTA already is configured with such checks, and will reject any obvious forgeries. More power to you in that case. For many of us, the reverse is true: if the spammer forges in an incomplete From: header like From: phred <phred> then the MTA will "helpfully" fill in the missing information -- with its own FQDN: From: phred <[EMAIL PROTECTED]> 3. Yes, your rules can be refined a bit. Ignoring point #2, try this: :0fw * ! ^From.*@([^ <> .]+\.)*rose-hulman\.edu\> | spamc -options ... If you want to add more conditions, you can do that: :0fw * ! ^From.*@([^ <> .]+\.)*rose-hulman\.edu\> * ! ^From: <[EMAIL PROTECTED]> | spamc -options ... Oh, and finally 4. This is not the Procmail list Hope this helps, /* era */ -- The email address era the contact information Just for kicks, imagine at iki dot fi is heavily link on my home page at what it's like to get spam filtered. If you <http://www.iki.fi/era/> 500 pieces of spam for want to reach me, see instead. each wanted message. ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk