2008年12月3日 星期三

procmail ~ 自己寄給自己?

作者: Baron. Wan

有垃圾信偽裝寄件者是自己, 然後寄給自己 O.O?!! 以下是比對了數封的相關垃圾信件後, 做出的處理動作....

:0 H
* ^[fF]rom:
{
FROMUSER=`grep "^[fF]rom:"|sed 's/^.* .* //'|sed 's/^.* //'`
TOUSER=`formail -xReceived:|grep "for"|head -1|sed 's/^.*for //'|awk -F" " '{print $1}'|sed 's/^/\ /'|sed 's/;$//'|sed 's/\ //'`
TOUSER2=`grep "^[tT]o:"|sed 's/^.* .* //'|sed 's/,//'|sed 's/^/\ /'|grep "${FROMUSER}"`
WHOISU=`if [ -n "${TOUSER2}" ]||[ "${FROMUSER}" = "${TOUSER}" ]&&[ -n "${FROMUSER}" ]; then echo "True"; else echo "False"; fi`

:0
* WHOISU ?? True
{
:0f
# to addition black list
| formail -i "X-SPAM-NOTUSER: MAILER_SPAM_NOTFROMUSER"
}
}

沒有留言: