experimental procmailrc for inline image filtering

Brian Burton <[email protected]> Tue, 26 Dec 2006 12:35:07 -0500
Newsgroups gmane.mail.spam.spamprobe.general
Message-ID <C1B6C77B.8D0C%[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Here is the procmailrc file that I am experimenting with in case anyone is
curious.  I've only just installed this so please don't use it unless you
are confident the syntax is right.  For all I know it might be buggy.

It's not all that efficient at this point since it runs SP three times on
hammy looking emails with inline images. I might switch from using train to
using score at some point and then I could drop the remove pass.

Ideally this should filter most email normally (no additional work except
for the scan for inline images).  Any email containing an inline image that
scores as spam is also filtered normally (no additional work).  You'll
notice that I use two spam mailboxes: one for "obvious" spams and one for
lower scoring ones.

Any email containing  an inline image is rescored using the headers only and
"X Mode" rules as a sort of bayesian white list to determine if the email is
from a known good source.  Any emails registering as spammy in this run are
dumped into a special mailbox for me to review later.  Any that look hammy
are passed through to my inbox.

Since most inline image spams are caught by SP it might take a week or so
for me to figure out if this is a good test or not.  I'll keep you all
posted.  If anyone has a better idea about how to code this in procmail I'm
open to suggestions.

All the best,
++Brian



-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.2 (Build 4075)
Charset: US-ASCII

wsBVAwUBRZFdTTxRyEoJfXIFAQjPjggAgaeZCiPWM+jJRcta4pk0NCCIwxyrEXl+
gbG+cWi1JetzKsVrJqgUsevBp8CMJYQV9bFiLK/447IK9xRJAAAibPCig10gvV1T
X9YrPUUmk/5OkwGEjALhWR1Am3ko63UXmKxUR2ri2lYViu50JN3nrCmf7DqCA+de
1rdNNZSgYn05avRi65HK1rw5PX+Qoamw452WXoOmPouFJCF48d2jNZkUbrFjIBqp
0vxiZnaYSTvUg1VvSqA0GYkpmJ5rev8fWmLNqXkCPLuSupNVVcuMfCkPn3R46zpz
bMdaNkVaIEhrlQyF+nPwTtFo6uQvV0cC5xlqkt72P4S9W356kp89pQ==
=vlS6
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV