Subject: Re: SPAM procmail filter for Bcc?

From: era eriksson <[email-masked]>
Date: 31 Mar 1997 21:11:13 +0300

On 30 Mar 1997 06:37:08 GMT, Steve Machol <[email-masked]>
posted to comp.mail.misc,comp.mail.pine:
 > :0:
 > * ^Bcc.*smachol
 > IN.testing
 > However, when I've tested this by Bcc'ing myself from another account, the
 > mail is getting through just fine and nothing shows up in my IN.testing
 > folder.

Look at the message you sent yourself. Does it actually contain a
header which matches the above regular expression? No. That's what BCC
means: strip off the BCC header completely before sending the message.
(The mail transport doesn't even look at the headers; instead the
destination is known because the "envelope" contains it.)

If you want to combat BCC:s, one venue is to ditch everything which is
not specifically TO you. (Take care to process any mailing lists
first, they are usually BCC:ed or equivalent.)

    :0:
    * ! ^TO_smachol
    IN.testing

/* era */

This has nothing with Pine to do so I've trimmed comp.mail.pine from Followups.

-- 
Defin-i-t-e-ly. Sep-a-r-a-te. Gram-m-a-r.  <http://www.iki.fi/~era/>
 * Enjoy receiving spam? Register at <http://www.iki.fi/~era/spam.html>

---

From: Paul O Bartlett <[email-masked]>
Date: Thu, 3 Apr 1997 10:13:53 -0500

On 2 Apr 1997, Steve Simmons wrote:

> Steve Machol <[email-masked]> writes:
> 
> >The point of my question was - how do I filter on the "Bcc:" field?
> >If I could do this, then I can effectively eliminate any spam sent to
> >me usinf Bcc.
> 
> You're out of luck.  There are a number of mailer agents which put
> no Bcc: field in the message sent, and the spammers use them.

    There is another point being overlooked here.  Bcc: was not
conjured up a long time ago merely to make life easier for spammers. 
It has a real, real-world, and specific purpose to aid privacy.  I have
sent mail with Bcc: for just that purpose, and I have been a Bcc:
recipient for just that purpose.  Trying to discard *every* piece of
mail that comes via Bcc: could mean that you discard some important
personal mail.

Paul                             <[email-masked]>
----------------------------------------------------------
Paul O. Bartlett, P.O. Box 857, Vienna, VA 22183-0857, USA
Finger, keyserver, or WWW for PGP 2.6.2 public key
Home Page:  http://www.access.digex.net/~pobart