At 8:27 PM -0700 7/16/02, Thomas Tempelmann imposed structure on a stream of electrons, yielding: >I found that a lot of the spam I get does contain any proper >destination address in its headers. > >E.g, while the Log shows that there was a msg for the account >"listuser" on my server, the headers will not contain anything >that refers to "[EMAIL PROTECTED]". > >Example: > >A mail from this list contains this line in the header: > > from mail.stalker.com ([209.1.58.249] verified) by tempel.org > (Stalker SMTP Server 1.8b8) with ESMTP id S.0000034935 for > <[EMAIL PROTECTED]>; Sun, 27 Jan 2002 10:11:17 -0800 > >Here, the text "<[EMAIL PROTECTED]>" is what I was looking for. >But some SPAM mails do not contain this information for which >account they were meant.
You should see that in the SIMS-added Received header of any mail sent to only one account. >I have 2 thoughts: > >1. >If this information is not present in the header, the only way >to see for which account the mail was is by looking into the >log. This is awkward. Can't this be improved in some way? Probably not, since the case where the account is not cited anywhere in the headers is a case where more than one account got the mail, so SIMS could either put all those addresses in and announce to all the users who else locally is getting that mail (not good) or leave out any such indication as it does. The latter is a better way to go. >2. >Since I see this happening only with SPAM mail, can't this be >used for another spam protection mechanism? Not reliably. If 2 addresses on your server were getting this list, neither address would appear anywhere in the headers of delivered messages. Beyond that. SIMS doesn't do filtering of message data, and the headers are technically part of the message data. SIMS only works with the envelope and source IP address to do filtering. >Oh, and one more: Wouldn't it be possible (I mean easy) to >allow me to write code that would get executed when SIMS receives >a mail so that this code of mine could look at the mail text, >allowing me to delete certain mail that I consider spam right >away? If I were to do that, I'd look first at what AutoShare does, and consider whether it is readily adaptable. If not, I think you could have account mail delivered to a folder, have an AppleScript hooked to changes in that folder, and have the AppleScript handle final delivery into a mbox file. On the other hand, *I* wouldn't ever do that, since I'd see it as easier to just forward everything to something that can run procmail (e.g. an OSX machine) >I guess Communigate Pro can do this, though? Yes. CGPro has a 'rules' system that lets you do filtering on message data. -- Bill Cole [EMAIL PROTECTED] ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
