Re: [cobalt-users] RaQ4 How to redirect mail coming FROM a specific sender/domain

[Parker Morse <morse@xxxxxxxxxxx>]

On Wednesday, November 27, 2002, at 06:09  AM, Eddie Bishop wrote:
> home for the night). I'd like to redirect all messages from that domain 
> (or
> specific sender) to myself or to a "quarantine" account, rather than let
> them go to the recipient.
>
> So what I really need is a line in /etc/mail/access like:
>
> dirtydomain.com[TAB]"send to (user)"
>
> but you can't do that in access. Is there another way short of a procmail
> recipe? If not, does anyone have that recipe to hand please?

I'm not the best one to answer this, but nobody else has spoken up yet.

"man procmailex" gives some good examples.

This is untested, but try this in /etc/procmailrc :

:0h:
* ^From.*dirtydomain.com
/var/spool/mail/quarantine

You may need to make sure /var/spool/mail/quarantine exists and has 
appropriate permissions. Ours is owned by admin and is 644.

If the virus is forging the From: line, this might not work.

pjm