procmail filter for mailinglist

[Derek Broughton]

Siggy Brentrup wrote:

> On Wed, Jul 15, 2009 at 23:26 -0300, Derek Broughton wrote:
>> Siggy Brentrup wrote:
> 
>> > Never put this in your .procmailrc: by crafting a Sender:
>> > xxxx-bounces at some.where in a malicious message anybody can create
>> > a maildir on your system, from now on any mail carrying this header
>> > will be delivered to list.xxxx/ without you even noticing :)
>> 
>> WTP?  I fail to see how that's an issue.  I don't use procmail, but I
>> _do_
>> filter mail into essentially random maildirs.   If it's spam, or any
>> other malicious content, it's just sitting there in a folder - it's
>> _never_
>> unnoticed.  It will show up as New mail.
> 
> Not with my MUA, it only checks mailboxes declared in .muttrc.  Citing
> it's author: "All mail clients suck. This one just sucks less." -me,
> circa 1995

Well, many other clients have learned to suck less in the following 14 
years, and even mutt does IMAP these days - which is why it doesn't matter 
whether mail gets directed to a brand new folder, the IMAP server still 
shows it.

>> > Most if not all MTAs handle .forward.
>> 
>> Absolutely, but not fetchmail itself.
> 
> It's no MTA, no MDA, it's a mess <duck/>. 

No, I agree with you - but the OP was complaining that fetchmail ignored his 
.forward - and I was just trying to explain why (and yes, I use fetchmail 
too).

-- 
derek