Re: An 'or' recipe

"John Levine" <[email protected]> 14 Aug 2017 00:57:43 -0000
Newsgroups gmane.mail.procmail
Message-ID <[email protected]>
In article <[email protected]> you write:
>RFC 822 is specific about folded white space:
>
>   From: Someone else <[email protected]>,
>         Joe Blow <[email protected]>
>
>is perfectly valid, and often used in short mailing lists,
>particularly in project management full text information retrieval
>systems.

This has come up in IETF mailing lists, particularly the question of
From: lines with multiple addresses.  If you see more than %0.00001 of
mail with more than one address in the From: line, your mailstream is
extremely unusual.

>Additionally, 'From: ' is not secure since anyone can put
>'From: Joe Blow <[email protected]>' in any mail handler to send mail. The
>'Return-Path: ' is a better choice since it is machine generated.

They're both machine generated, albeit perhaps by different machines.
For an application line this, looking for mail from specific people
who send it directly from their own accounts, their From: lines will
be normal, and if you're worried about forgery, neither From: nor
Return-Path: is adequate without external security measures.

>> >> > :0
>> >> > * ^From:.*([email protected]|[email protected]|mail@ccha=
se
>> >> > harwood.com|[email protected]|[email protected]|help@b=
oo
>> >> > kfunnel.com|[email protected]|[email protected]|cgocke=
l@
>> >> > cgockelwrites.com|[email protected]|[email protected])
>> >> > $AUTHORS