[vps-mail] Sendmail or procmail? Filter question

[Marjolein Katsma <tfyj8lv02@xxxxxxxxxxxxxx>]

Hi all,

After a few more tweaks, it seems my new sendmail configuration is working nicely now. I added a second blocklist (CBL - http://cbl.abuseat.org/) after the SpamCop bl, and it's catching a few more spams that SCBL lets through; my rules in access.db are catching quite a lot, too.

Now, I'd like to tackle the following situation:
- there's a number of specific addresses that are made-up (never used) that get a lot of spam; these are now rejected (via access.db)
- there's also my webmaster address where I do accept email
- sometimes I get spam with one of these addresses in the To: field, and the others in the Cc: field, for instance:

To: madeup@xxxxxxxxxxxx
Cc: <webmaster@xxxxxxxxxxxx>, <alsofake@xxxxxxxxxxxx>

Since this contains the made-up addresses, it's obviously spam; since it also contains one valid address (and isn't stopped by either blocklist), it stil gets through.

Is there a way to reject such a mail based of the rule: if any of these made-up addresses occurs in either To:, Cc: or Bcc, reject the mail completely?

If this could (reasonably) be done with sendmail, that would be fine; I suspect though this is maybe a job for procmail.

-- 
Marjolein Katsma

======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
======================================================================