On Mon, 29 Jun 2015, [email protected] wrote:

Here's would be type examples:
[email protected]
[email protected]
[email protected]
....and on and on.

I've looked up some of the domains used which are not as obvious as my examples 
and they don't exist. The IPs may be OK and don't want to use IPs to snag those.

Again, not much constants in the bodies to do much good to use "HB ??" in the 
recipe to look in the header and body.

Well, the basic /\.in\.net/ RE is likely to be rather FP-prone, especially in Procmail if you aren't using weighting.

There are ways to bound that RE to limit what it will match, but different parts of the message will need different bounds.

Untested:

* ^Received: .*from [^ ]*\.in\.net[ ]

* ^From: .*\.in\.net[>$]

* ^Return-Path: .*\.in\.net>

* ^Message-ID: .*\.in\.net>

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [email protected]    FALaholic #11174     pgpk -a [email protected]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  A good high-school education is still essential, and
  college is where you go to get one.                -- MiddleAgedKen
-----------------------------------------------------------------------
 5 days until the 239th anniversary of the Declaration of Independence

Reply via email to