# where to send spam
HIGHSPAM=spam/HIGHSPAM/
SPAM=spam/SPAM/
+JOEJOB=spam/JOEJOB/
# A list (one per line) of people I KNOW are spammers :-)
# can match any part of name so you can use fred, fred@aol.com or aol.com to
/dev/null
+# Handle delay messages
:0 Hc
* !Message-Id: .*delay[0-9]+@
* ^TO \/don\+de[^@]+
* ^TO \/don\+delay\+[^@]+
|/home/don/bin/delay_mail --mailto don@donarmstrong.com --enqueue --email --delay $MATCH
-
-# ==========================================================================
-# Correct crap or broken mails using sed
-# ==========================================================================
-# Correct wrong sig-dashes, ie add a space for lines with only "--" in them:
-# from: ^--$
-# to: ^-- $
-#:0 fBw
-#* ^--$
-#| sed -e 's/^--$/-- /'
-
-# preconverts all plain-text mail arriving in certain encoded
-# MIME formats into a more compact 8-bit format which can be
-# used and displayed more easily by most programs.
-#:0
-#* ^Content-Type: *text/plain
-#{
-#:0 fbw
-#* ^Content-Transfer-Encoding: *quoted-printable
-#| mimencode -u -q
-
-#:0 Afhw
-#| formail -I "Content-Transfer-Encoding: 8bit"
-
-#:0 fbw
-#* ^Content-Transfer-Encoding: *base64
-#| mimencode -u -b
-
-#:0 Afhw
-#| formail -I "Content-Transfer-Encoding: 8bit"
-#}
-
# Convert old-style PGP messages to MIME
:0
* !^Content-Type: multipart/
-i "Content-Type: application/pgp; format=text; x-action=sign"
}
-######################################################################
-# Here we search the list of people we always want to get mail from, #
-# and deliver the mail if it's from one of them, no matter what. #
-# The FRIENDS file is set and described above. #
-######################################################################
:0:
* ! ? (formail -x From: -x Sender: | fgrep -iqf $FRIENDS)
{
-# $DEFAULT
-# deliver to default mailbox
-
-#spamassasin is being run sitewide.
-
-# Mails with a score of 15 or higher are almost certainly spam (with 0.05%
-# false positives according to rules/STATISTICS.txt). Let's put them in a
-# different mbox. (This one is optional.)
+# Mails with a score of 15 or higher are almost certainly spam
:0:
* ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
#definetly_spam
$SPAM
+# I get joe-jobbed a lot; if a message is from a mailer, but not from
+# one of mine, discard it.
+:0:
+* (^(((Resent-)?(From|Sender)|X-Envelope-From):|>?From )([^>]*[^(.%@a-z0-9])?(Post(ma(st(er)?|n)|office)|(send)?Mail(er)?|daemon|mmdf|n?uucp|ops|r(esponse|oot)|(bbs\.)?smtp(error)?|(s(erver)|ystem)|A(dmin(istrator)?|MMGR))(([^).!:a-z0-9][-_a-z0-9]*)?[%@>\t ][^<)]*(\(.*\).*)?)?$([^>]|$))
+* !^From:.+(ucr|debian|donarmstrong|sndservers|ccin|schedulesdirect)
+* !^From:.+(schedulesdirect|paypal.com)
+* !^To:.+ (don\+.+\@donarmstrong\.com)
+* !^List-.+
+$JOEJOB
# Work around procmail bug: any output on stderr will cause the "F" in "From"
# to be dropped. This will re-add it.
-##################################################################
-# SPAM filter. I don't like spam. I just don't #
-##################################################################
-
-# Here we search a file with a list of people we _never_ want to
-# get anything from, tossing the mail if it's from one of them.
-# SPAMMERS is set and described above.
-# Note, you can use the following line instead to be even more
-# strict, they can't have even relayed it via an adress in the
-# spammers file:
-# * ? (formail -x From: -x Sender: -x Reply-To: -x Received: | fgrep -iqf $SPAMMERS)
-:0:
-* ? (formail -x From: -x Sender: -x Reply-To: | fgrep -iqf $SPAMMERS)
-| formail -A "X-SPAM-RULE: address found in spammers file" >> $SPAM
-
-# look for X-Advertisement header or 'advertisement' in the subject,
-# accounting for possible sp. error. "Nice" spammers use this header.
-:0:
-* ^X-Adverti[sz]ement:
-| formail -A "X-SPAM-RULE: X-Advertisement header" >> $SPAM
-
-:0:
-* ^Subject:.*adverti[sz]ement
-| formail -A "X-SPAM-RULE: Advertisement in subject" >> $SPAM
-
-# snag the To: and From: headers
-TO=`formail -zx To:`
-CC=`formail -zx Cc:`
-FROM=`formail -zX From: | formail -zrx To:`
-
-# no To: line AND no Cc: line. You could filter out anything with no To:,
-# but there are lots of mailinglist idiots who Cc the list and don't To:
-# anyone ;-)
-:0:
-* TO??^$
-* CC??^$
-| formail -A "X-SPAM-RULE: no To: or Cc: header" >> $SPAM
-
-# bogus pegasus header, very common with spammers, and I've never
-# seen it used by anyone else.
-:0:
-* ^Comment: Authenticated sender is
-* ! ^X-Mailer: Pegasus
-| formail -A "X-SPAM-RULE: bogus pegasus header" >> $SPAM
-
-#large number of spaces then number in subject
-:0:
-* ^Subject:.*\ \ \ \ \ \ \ \ \ [0-9][0-9]+
-| formail -A "X-SPAM-RULE: too many spaces followed by number in subject" >> $SPAM
-
-#laser toner cartridges. (I mean, come, on!)
-:0:
-* ^Subject: laser cartridges
-| formail -A "X-SPAM-RULE: laser cartridges suck" >> $SPAM
-
-}
-
# Debian role accounts
:0:
###################
# Mailing lists #
-5B5B###################
+###################
+
+:0:
+* ^To: \+announce@student.ucr.edu
+* ^List-Id: <stannounce2.lists.ucr.edu>
+lists/ucr-announcements
:0:
* X-Mailing-List: <\/[^@]+
* ^Sender: (Bugtraq|Incidents Mailing|VULN-DEV) List
lists/bugtraq/
-#########################################
-# Final SPAM filter, post mailing lists #
-#########################################
-
-# NOTE: This catches like 80% of my SPAM, it really works but make the match
-# CORRECT :-)
-#
-# Not mailing list, but not to me. SPAM.
-#:0:
-#* !^TO(anylevel.com|donarmstrong.com|donarmstrong.org|oneinfinity.com|donarmstrong.net|pellam.ucr.edu|rzlab.ucr.edu|student.ucr.edu|localhost|Blind\.Copy\.Receiver)
-#| formail -A "X-SPAM-RULE: Not to one of my addresses or a mailing list" >> $SPAM
-
-
#####################################
# Last rule: Put mail into mailbox #
#####################################