1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
# junkfilter
# a junk email filter system for procmail
# Copyright 1997-2002 Gregory Sutter <gsutter@zer0.org>
#
# $Id: junkfilter.two,v 2.16 2002/04/21 03:20:37 gsutter Exp $
#
# Please read the file "README" and the page
# http://junkfilter.zer0.org/ before using junkfilter.
# Section Two, reasonable spam-catching recipies
JFSEC=2
# Invalid X-UIDL header, contains non-displayable characters.
# This rule is pretty lame.
:0
* ^X-UIDL:
* $ !^X-UIDL:[ ]*${JFPCHAR}+[ ]*$
{ JFMATCH="$JFSEC: Invalid X-UIDL" INCLUDERC=$JFDIR/junkfilter.match }
# New bad-AOL filter.
:0
* $ ^From:\/(.*[^-(.%@a-zA-Z0-9])?[^@<>, ]+@aol\.com\>
* $ ! ^From:(.*[^-(.%@a-zA-Z0-9])?([^a-z]|.+[^0-9a-z]|............).*@aol\.com\>
{ JFMATCH="$JFSEC: Forged AOL account: $MATCH" INCLUDERC=$JFDIR/junkfilter.match }
# Hotmail mails all have this header
# note, I'm assuming you're not reading this mail at hotmail.com :)
# commented out 20020308 for lots of false matches. can it be fixed?
#:0
#* $ $JFFROM.*hotmail.com
#* $ ! ^X-Originating-IP:$JFWS\[$JFIPNUM\.$JFIPNUM\.$JFIPNUM\.$JFIPNUM\]
#{ JFMATCH="$JFSEC: Forged hotmail.com address" INCLUDERC=$JFDIR/junkfilter.match }
# Checks date. Because -0600 is either CST, MDT, or water, NOTHING should
# ever have a time-zone of "-0600 (EST)".
:0
* ()\/^(Date|Received):.* -0600 \(EST\)
{ JFMATCH="$JFSEC: Invalid datestamp: $MATCH" INCLUDERC=$JFDIR/junkfilter.match }
# Empty headers don't belong.
:0
* ^\/(From|To|Reply-To):[ ]*("")?[ ]*[<>]*[ ]*$
{ JFMATCH="$JFSEC: Empty header: $MATCH" INCLUDERC=$JFDIR/junkfilter.match }
JFSEC
# EOF junkfilter.two
|
