On 31 Jan 2000, Dominic Mitchell wrote:
> By any chance are these messages with full headers? I have to fight
> badly formated chinese spam. What is happening here is that the mail
> message getting split in 2 parts. One of the part has incomplete
> headers (missing "from" and "received" field). I have not find an
> easy to get rid of them even with procmail recipes.
Yes, I do have the full headers of these messages - they were sent by way
of a poorly configured SMTP server in Japan. The server doesn't include
the IP address of the machine that sent the message, so the usual header
detective work doesn't help much. On the other hand, it was a traditional
make.money.fast chain letter, so I do have the address of a post office
box belonging to the sender (spammers are not rocket scientists).
The "from" header is optional anyhow - when one mail server talks to
another, the recipient's email address is communicated separately from the
message itself, and the "from" header is basically just part of the
message.
IMO procmail filtering is more trouble that it's worth. I used to use
this approach, but spammers rarely use the same "from" address twice (nor
any other recognizable message attribute, really). This worked when
AGIS.net would let people like Sanford Wallace and Walt Rines send email
from their own domain names, but that's pretty rare now. It's no use
adding a new line to your procmail filter if the spammer is going to
send their next message from a completely different throwaway dialup
account and a completely different third-party SMTP relay.
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
