Can this be done in procmail?

I have a domain with multiple email accounts I get the same spam crap
emails to at least 4 accounts at a time, the sender changes on each email
but the subject and body are the same.

Is there any way to detect via counter or something if the clown sends it
to 2 or more people , /dev/null it so it won't go to the rest of the email
accounts. Only the first account will get the email.


Sam

Re: Can this be done in procmail?

On comp.mail.misc, in , "Sam the Sham" wrote:


http://groups.google.com/advanced_group_search
Sam the Sham
Results 1 - 4 of 4 posts in the last year
1 Gmail-Past-discussions
1 comp.mail.misc
1 rec.humor
1 uk.rec.walking

> Subject: Re: Can this be done in procmail?

Probably. But I don't help effing trolls.

[Note: I don't read the articles of "Sam" or his numerous
sockpuppets or his 'friends', nor any responses to them, and
haven't for years. He follows me all over the Usenet, and I
still don't read his articles. This _really_ pisses him off.
.]

Alan

--
http://home.earthlink.net/~alanconnor/contact.html
Other URLs of possible interest in my headers.

Re: Can this be done in procmail?

Alan,

I have no idea what warrented that response. I was just asking for
help. The only post that's mine in that list is the comp.mail.misc. I'm
not "following" you.
I still am looking for help with this issue. If you can't help
that's ok, but it sure did not warrent that type of response.


Peter

Alan Connor wrote in
news:slrne5vpiu.2sd.i3x9mdw@b29x3m.invalid:

> On comp.mail.misc, in ,
> "Sam the Sham" wrote:
>
>
> http://groups.google.com/advanced_group_search
> Sam the Sham
> Results 1 - 4 of 4 posts in the last year
> 1 Gmail-Past-discussions
> 1 comp.mail.misc
> 1 rec.humor
> 1 uk.rec.walking
>
>> Subject: Re: Can this be done in procmail?
>
> Probably. But I don't help effing trolls.
>
> [Note: I don't read the articles of "Sam" or his numerous
> sockpuppets or his 'friends', nor any responses to them, and
> haven't for years. He follows me all over the Usenet, and I
> still don't read his articles. This _really_ pisses him off.
> .]
>
> Alan
>

FAQ: Canonical list of questions Beavis refuses to answer (V1.50) (was Re: Can this be done i

This is a MIME GnuPG-signed message. If you see this text, it means that
your E-mail or Usenet software does not support MIME signed messages.
The Internet standard for MIME PGP messages, RFC 2015, was published in 1996.
To open this message correctly you will need to install E-mail or Usenet
software that supports modern Internet standards.

--=_mimegpg-commodore.email-scan.com-21679-1147172529-0003
Content-Type: text/plain; format=flowed; charset="US-ASCII"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Usenet Beavis writes:

> On comp.mail.misc, in , "Sam the Sham" wrote:
>
>
> http://groups.google.com/advanced_group_search
> Sam the Sham
> Results 1 - 4 of 4 posts in the last year

Results 1 - 10 of 23,600 for Usenet Beavis (0.28 seconds)

You win, Beavis.


> Probably. But I don't help effing trolls.

Can't stand the competition, Beavis.


> [Note: it's not my fault that I'm a complete dumbass. I was dropped on my
> head as a child. See http://www.pearlgates.net/nanae/kooks/ac/ for
> more information]
>
> Beavis

FAQ: Canonical list of questions Beavis refuses to answer (V1.50)

This is a canonical list of questions that Beavis never answers. This FAQ is
posted on a semi-regular schedule, as circumstances warrant.

For more information on Beavis, see:

http://www.pearlgates.net/nanae/kooks/ac/

Although Beavis has been posting for a long time, he always remains silent
on the subjects enumerated below. His response, if any, usually consists of
replying to the parent post with a loud proclamation that his Usenet-reading
software runs a magical filter that automatically identifies anyone who's
making fun of him, and hides those offensive posts. For more information
see question #9 below.

============================================================ ================

1) If your Challenge-Response spam filter works so well, why are you munging
your address, when posting to Usenet?

2) If spammers avoid forging real E-mail addresses on spam, then where do
all these bounces everyone reports getting (for spam with their return
address was forged onto) come from?

3) If your Challenge-Response filter is so great, why do you still munge
when posting to Usenet?

4) Do you still believe that rsh is the best solution for remote access?
(http://tinyurl.com/5qqb6)

5) What is your evidence that everyone who disagrees with you, and thinks
that you're a moron, is a spammer?

6) How many different individuals do you believe really post to
comp.mail.misc? What is the evidence for your paranoid belief that everyone,
except you, who posts here is some unknown arch-nemesis of yours?

7) How many times, or how often, do you believe is necessary to announce
that you do not read someone's posts? What is your reason for making these
regularly-scheduled proclamations? Who do you believe is so interested in
keeping track of your Usenet-reading habits?

8) When was the last time you saw Bigfoot (http://tinyurl.com/23r3f)?

9) If your C-R system employs a spam filter so that it won't challenge spam,
then why does any of the mail that passes the filter, and is thusly presumed
not to be spam, need to be challenged?

10) You claim that the software you use to read Usenet magically identifies
any post that makes fun of you. In http://tinyurl.com/3swes you explain
that "What I get in my newsreader is a mock post with fake headers and no
body, except for the first parts of the Subject and From headers."

Since your headers indicate that you use slrn and, as far as anyone knows,
the stock slrn doesn't work that way, is this interesting patch to slrn
available for download anywhere?

11) You regularly post alleged logs of your procmail recipe autodeleting a
bunch of irrelevant mail that you've received. Why, and who exactly do you
believe is interested in your mail logs?

12) How exactly do you "enforce" an "order" to stay out of your mailbox,
supposedly (http://tinyurl.com/cs8jt)? Since you issue this "order" about
every week, or so, apparently nobody wants to follow it. What are you going
to do about it?

13) What's with your fascination with shit? (also http://tinyurl.com/cs8jt,
and http://tinyurl.com/qv296)?

14) You complain about some arch-nemesis of yours always posting forged
messages in your name. Can you come up with even a single URL, as an example
of what you're talking about?

15) You always complain about some mythical spammers that pretend to be
spamfighters (http://tinyurl.com/br4td). Who exactly are those people, and
can you post a copy of a spam that you supposedly received from them, that
proves that they're really spammers, and not spamfighters?


--=_mimegpg-commodore.email-scan.com-21679-1147172529-0003
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQBEYHaxx9p3GYHlUOIRAtNRAJ9U/rnWqBp8Yr5qtb3MADvSbBjgwACf dLtB
eq29jXQchJQkv8z1o+5ehLU=
=Ukcq
-----END PGP SIGNATURE-----

--=_mimegpg-commodore.email-scan.com-21679-1147172529-0003--

Re: Can this be done in procmail?

Sam the Sham wrote:

> I have a domain with multiple email accounts I get the same spam crap
> emails to at least 4 accounts at a time, the sender changes on each email
> but the subject and body are the same.
>
> Is there any way to detect via counter or something if the clown sends it
> to 2 or more people , /dev/null it so it won't go to the rest of the email
> accounts. Only the first account will get the email.
>
>
> Sam
>

Yes it can be done, you would need to determine whether the recipients
are in To, CC. You essentially need to determin what the pattern is.

Are you running your own mail server? Which mail server are you using?
What anti-spam schemes are you using besides procmail? Do you have
procmail configured with suid and is globally configured?

There are different variations that come into play.

AK
P.S. Pay no attention to the knuckle head Alan Connor (bait to confirm
that counter to his statements, he reads/retrieves messages).

Re: Can this be done in procmail?

>
> Yes it can be done, you would need to determine whether the recipients
> are in To, CC. You essentially need to determin what the pattern is.
>
To:
> Are you running your own mail server?
Yes
Which mail server are you using?
Sendmail
> What anti-spam schemes are you using besides procmail?
None just procmail rules, CI-Host Server
> Do you have procmail configured with suid and is globally configured?
Yes
>
> There are different variations that come into

The message and subject changes every day, the sender changes

Peter

Re: FAQ: Canonical list of questions Beavis refuses to answer (V1.50) (was Re: Can this be d

On alt.free.newsservers, in , "Sam" wrote: