[boulder.pm] OT Help with procmail

[LZ]

Hello Walter,

Thanks for your reply.

I've since found out, it is a new virus route, and my ISP
must have done a system wide block [after I sent rfc headers
of all them I recieved. (I hope)]

Sorry for the off topic intrusion.

Lamar

Wednesday, March 20, 2002, 5:02:42 PM, :

> On Sun, 17 Mar 2002, LZ wrote:

>> Hello boulder-pm-list,
>>
>> My first post here since joining in '99 when I thought I'd
>> get into the tech field, not. But I've enjoyed the list, so
>> I've hung around, and the hikes sound great!
>>
>> I've rcv'd the below with a 123k attached file 7 times,
>> times two to another old ISP address since 10 Mar all with
>> another address in the rfc header. My ISP
>> replied with a form letter when I asked them for help, set
>> up a .procmailrc file with the from address to block. It
>> seemed to work, nothing since 14 Mar until today.
>>
>> Is there problem in my procmail file? <G> Likley, I hope.
>>
>> This is what I have in the .procmailrc file on my user page:
>>
>> ::
>> ^From: .*<rdquest12 at microsoft.com>
>> /dev/null
>>
>> That is not working. Taken from the web page, C c C v,
>> should it be on one line? :: in line? ??

> [snip invervening lines]

>> From: "Microsoft Corporation Security Center" <rdquest12 at microsoft.com>

> I haven't used procmail in a while, but I'm thinking

> :0 H
> * ^From.*<rdquest12 at microsoft\.com>
> /dev/null

> might work.  Good luck.

> Walter