It sounds like an issue w/ kmail/vim and not so much a nefarious spammer ability.
And I'm not sure what you mean by "unlisted header". If you mean: [other headers] To: unlisted header Then the answer is "unlisted header" is actually the first line of the body. On Mon, Feb 23, 2009 at 5:55 PM, Gene Heskett <gene.hesk...@verizon.net> wrote: > I've had zip luck getting a trigger line based on Undisclosed Recipients:, or > Unlisted Recipients: here, so I called up my .procmailrc and tried to enter > the check phrase by doing a copy/paste from the kmail displayed line when in > show all headers mode. But, when pasting that into vim, there is an > invisible linefeed occupying the underscores place in the header line, and it > doesn't show up in the show all headers display. > > The input line looks like this: > > To: unlisted-recipients:; (no To-header on input)@gmail-pop.l.google.com > > But copy/pastes as: > To: _ > unlisted-recipients:; (no To-header on input)@gmail-pop.l.google.com > > Where the underscore is the hidden line feed. I save the message, and > inspected it with khexedit, but the saved version does not have an 0x0a > there. > > Anybody got an idea how the spammers have managed that? > > And better yet, how to defend against it as I'd like to /dev/null any message > with an unlisted header.
