This doesn't belong on deb-sec or deb-laptop. I'm not subscribed to deb-user, though, so CC please. On Fri, Jan 02, 2004 at 03:44:01PM -0800, Matthew Whitworth wrote: > Don't pipe to /dev/null just yet -- I've had five false positives since > implementing it this morning! > > I can provide procmail log entries (although not the actual emails -- I > /dev/null-ed prematurely) if you'd like. I'm going to leave the filter > in place, but pipe them to a folder instead so that I can debug. My conservative rule is this: :0: * ^Subject: (un)?subscribe$ unsub-idiots That way I get to see any snarky comments by people picking on those who sent their command to the wrong address. It hasn't yet caught anything I didn't want it to. > > Matthew Whitworth > > s. keeling wrote: > > >FYI, procmail users: This appears to work fairly well so far; fwiw: > > > ># ------------------------------------ > ># inept mailing list (un)su[b]?scribe attempts, and "vacation" dorks. > ># > >:0 HB > >* 1^0 ()(I will be out of the office|I will respond to your message when I > >return\.) > >* 1^0 ^Subject:.*(un)?su(b)?(s)?cribe > >* 1^0 $ ^^${SPCNL}*(un)?su(b)?scribe > >* -1^0 ^Subject:.*Re: > >{ > > LOG="(Un)?subscriber - " > > :0 > > /dev/null > >} > > > > > > > > > > > -- > To UNSUBSCRIBE, email to debian-security-request@lists.debian.org > with a subject of "unsubscribe". Trouble? Contact > listmaster@lists.debian.org -- #define X(x,y) x##y Peter Cordes ; e-mail: X(peter@cor , des.ca) "The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces!" -- Plautus, 200 BC
Attachment:
signature.asc
Description: Digital signature