<johnm@xxxxxxxxxxxxxxxxxxxx> wrote:
> The problem with this email is that the return address has been forged, it
> is not where the email really came from. So far I've had 8 of these from
> as far afield as the UK, Argentina and Australia. All have been from
> different email addresses.
>
> Putting hahaha@xxxxxxxxxx will not work since the server looks to see
> where the email is really from.
>
> Having said that, if anyone comes up with a solution I'd be interested to
> hear it.
See my post from about 7 hours ago about procmail. You can use it to filter
out most anything. For that particular email a filter that searches the
body for "snow white" might work for this email. You could either have the
message sent to /dev/null (which will delete it) or have the messages stored
in a 'junk' folder that can be reviewed so you or the user can check for
false positives. The set of extensive procmail recipes at
http://www.spambouncer.org/ are pretty popular for spam identifying rules.
You might want to install it or build your own rules.
--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/