Delete incomming emails to [e-mail]

I want to keep my catch all

[MikeMike]

I have finally set up spamassassin and procmail and they send around 2000 spam emails to /dev/null per day. I still have several slipping through to me and I noticed that most of them are sent to the same few non existing email addresses such as [e-mail], [e-mail] etc, email addresses I never have used. Are there any way I can blacklist based on the email address the spam is sent to?

[mat]

The most obvious, if not particularly subtle, method is to only allow incoming to specified addresses, and send (or not, tastes vary) a bounce message.

This sort of thing would work in procmail:

:0
*!^To:.*([e-mail]¦[e-mail]¦[e-mail])
*!^FROM_DAEMON
*!^X-Loop:[e-mail]
{
:0 h c
¦ (formail -t -r -A"X-Loop: [e-mail] " ; \
cat /home/yourdomain/junkresponse.txt ) ¦ $SENDMAIL -t
LOG='INVALID ADDRESS: '
:0
/dev/null
}

The X-Loop:[e-mail] bit gets added as an extra header in the bounce message, and is checked for on all incoming mail to avoid a never-ending closed loop.

Hope this might start you down the road.

[PCInk]

(Post at same time!)

[MikeMike]

I have used too many different email addresses on my domains over the years, and I haven't kept track of the email addresses and what purpose they have been used for.

I really just want to base this on a list of 6-7 email addresses to which the spammers keep on sending me emails, not base it on the good email addresses.

[mat]

:0
* ^To:.*([e-mail]¦[e-mail])
{

:0:
/dev/null
}

Or, if you want to double-check them first rather than dev-nulling, send them to a dedicated folder and eyeball them via webmail:

/usr/spool/mail/yourdomain/tobechecked (or whatever your path would be in this case)

[MikeMike]

Thats what I needed...
Thanks!