On Wed, Aug 20, 2003 at 05:19:09PM +0000, Bob Crandell wrote: > So > >> :0 C > should be: > >> :0 B: > so it will search everything, case insensitive, and lock?
As noted, but to make it clear, grepped expressions are by default case insensitive. :0 * via--- (munged for my mail filter) /dev/null is what you want, almost. You don't want to specify D which will make it case sensitive. You don't want to specify B which will filter only the body and not the header. Subject is in the header, and you definitely want to filter that as well. Also you don't want to send it to /dev/null. Instead quarantine it, otherwise some legitimate mail may get lost. It depends on the word or regex. There are a few regexes that I /dev/null, most I quarantine, including via---. The only emails I get that have via--- that I actually want are email discussions about email filtering, which you definitely want. In this case it would be: QUARANTINE="/var/spool/mail/quarantine" :0: * via--- $QUARANTINE Then, since procmail has a built in egrep engine, you can get fancy: An excerpt from my procmail filter -- Before replying, please delete this content, otherwise my mail filter will capture it and I won't respond for some time. :0HB: * X-RBL-Warning|\ ^From:[ ]*\/.+(luckycherrycasino|yours\.com)|\ ^Reply-To:[ ]*\/.+yours\.com|\ ^To:[ ]*\/.+(lists\.postmastergeneral\.com)|\ ^Subject:[ ]*\/(ADV:)|\ Dear Investor|\ human growth hormone|ultimatehgh|viagra|\ lose weight fast|\ make money.* (at home|sending e-?mail)|you can earn \$|\ as seen on( national)? tv|\ bulk e(-)?mail|internet advertising|\ million(s of)?( active)? (email addresses|newsgroup)|\ Section 301|S.( )?1618|\ (laugh-?mail|friend-?(cards?|greetings?)|cool-?downloads)\.(com|net)|\ your_details\.zip|\ fu---ng|penis|underage|hardcore|\ \<(cock|pu--y|pu--ies|rape)\> $QUARANTINE Cory -- Cory Petkovsek Adapting Information Adaptable IT Consulting Technology to your (541) 914-8417 business [EMAIL PROTECTED] www.AdaptableIT.com _______________________________________________ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
