Forum Moderators: bakedjake

Message Too Old, No Replies

Problem with Procmail

Filter wont work

         

Madman

11:56 pm on Feb 27, 2005 (gmt 0)



Hi,

this is the situation:

a spammer fakes his mails with my Emailadress. A recipient wich do not exist reject the mail as an Error-Message. Now i wonna block this Error-Mails with Procmail. But only if the Mail from nonexistingrecipientdomain.tld goes to myemailadress@mydomain.tld

This is the Header of that Mails:

From MAILER-DAEMON Fri Feb 25 16:18:11 2005
Return-Path: <>
Delivered-To: mailboxnumber@mydomain.tld
Received: from mail2.stuenings.de (Stuenings6.kr.revmap.vianetworks.de [#*$!.xx.#*$!.xx])
by mydomain.tld (mydomain.tld) with ESMTP id 01D103D19C1
for <myemailadress@mydomain.tld>; Fri, 25 Feb 2005 16:18:08 +0100 (CET)
Received: from nonexistingrecipientdomain.tld (p50854122.dip0.t-ipconnect.de [xx.xxx.xx.xx])
(authenticated bits=0)
by mail2.stuenings.de (8.12.7/8.12.7/SuSE Linux 0.6) with ESMTP id j1PFHDGC009636
for <myemailadress@mydomain.tld>; Fri, 25 Feb 2005 16:17:14 +0100
Received: from localhost (localhost)
by nonexistingrecipientdomain.tld (8.11.6/8.11.6) id j1OFGN128957;
Thu, 24 Feb 2005 16:16:23 +0100
Date: Thu, 24 Feb 2005 16:16:23 +0100
From: Mail Delivery Subsystem <MAILER-DAEMON@nonexistingrecipientdomain.tld>
Message-Id: <200502241516.j1OFGN128957@nonexistingrecipientdoma in.tld>
To: myemailadress@mydomain.tld
MIME-Version: 1.0

And this is my Procmailrc:

LOGFILE=/var/log/procmail
#VERBOSE=ON
SHELL=/bin/sh

:0:
* ^Received:.*nonexistingrecipientdomain.tld
* ^To:.*@mydomain.tld
¦ /var/log/mail/getthespam

:0fw
* < 256000
¦ /usr/local/bin/spamc -f -u $LOGNAME

# Mails with a score of 15 or higher are almost certainly spam (with 0.05%
# false positives according to rules/STATISTICS.txt). Let's put them in a
# different mbox. (This one is optional.)
#:0:
#* ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
#/var/spool/mail/almost-certainly-spam

The Problem:

The Mail goes in my mailbox and would not redirect to the File 'getthespam'

Anybody knows whats wrong with my procmailrc?

Thanks for your help