Joseph Brennan wrote: > > > Why not just tell procmail to drop them? > > : 0 > * ^Received: .* 89.83.98.193 > /dev/null > > Joseph Brennan > Columbia University Information Technology >
I just tried, but it doesn't work either. Recall that the nasty IP is wrapped as part of an attachment. I need to be able to scan the entire raw message with either SA or I suppose procmail. While if I can make this work at the procmail level, I would think it would be better to use SA, because rules can be tested more easily using --lint. Thoughts? -- View this message in context: http://www.nabble.com/Being-Buried-In-Returned-Email---Need-To-Mark-Certain-IPs-tp18181167p18183545.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
