// See also: http://www.xs4all.nl/~rvtol/procmailrc.zip
// ----
// main rc-file: .procmailrc
// ----
LOGFILE=$HOME/pm/log

LOGABSTRACT=none
VERBOSE=no
#VERBOSE=yes

#unset SHELLMETAS
SHELLMETAS

SHELL=/bin/sh

LINEBUF=8192


MAILDIR=$HOME/mail

Mdir="/"
:0
* ! Mdir ?? /
{ Lock=":" }


##############################################################
# Personalisation info                                       #
##############################################################
#                                                            #
# USER=<your xs4all-user-name>                               #
#                                                            #
# MAILNAME=$USER                                             #
# or a list of email-aliases: ($USER|alias1|alias2)          #
#                                                            #
# MAILADDR=$MAILNAME@(xs4all\.(nl|be|org|net)|hacktic\.nl)   #
#                                                            #
##############################################################
USER=$LOGNAME
MAILNAME=($USER|rovabu|wvw|jmeijer|jmeyer|mlvtol|ml)
MAILADDR=(\
$MAILNAME@(\
isolution\.nl|\
xs4all\.(nl|be|org|net)|\
hacktic\.nl|\
i-solution\.com)|\
postmaster@(isolution\.nl|i-solution\.com))
##############################################################
# End of personalisation                                     #
##############################################################

BKUP_BOX = "bkup$Mdir"

SPAM_BOX = "spam$Mdir"
BULK_BOX = "bulk$Mdir"
VIRS_BOX = "virs$Mdir"

BOX = "=$BKUP_BOX"

#==============================
# Variables
#------------------------------
NL="
"
DONE=F

#LOG="
#~Envelope-To: ${1:-<empty>}
# "

### WSP contains [<space><tab>]
##
#
WSP="[ 	]+"
NWSP="[^ 	]+"

XTO="X-$USER-To:"


BSIZE="20000"
:0B
*$ < $BSIZE
* 1^1 .
* 1^1 ^.*$
* -1^0 ($)^^
{ BSIZE="$=" }
:0E
{ BSIZE="${BSIZE}+" }


#### keep a safety-copy of all mail
###
##
:0 c
* < 100000
{
  :0
  * < 20000
  { RAW_GZ = "$HOME/pm/raw.gz" }
  :0E
  { RAW_GZ = "$HOME/pm/raw_big.gz" }

  :0 fw
  | gzip -9fc

  :0 ar:
  $RAW_GZ

  :0:
  $RAW_GZ.$$
}


From="<no-From>"
:0
* ^^From +\/[^ ].*
{ From="$MATCH" 
  :0
  * From ?? ^^sentto[-0-9]+[^-]\/-.*@returns\.groups\.yahoo\.com.*
  { From="sent-2$MATCH" }
}

# parses From into From_Addr,DDD,MMM,DD,MM,YY,YYYY,HH,NN,SS
INCLUDERC = $HOME/.procmailrc.from

LOGFILE="$LOGFILE.$YYYY-$MM-$DD"

# TOLOG="$TOLOG From $From_Addr  $DDD $MMM $DD $HH:$NN:$SS $YYYY$NL"

TOLOG="$TOLOG$NL~From $From_Addr ($DDD $YYYY-$MM-$DD $HH:$NN:$SS)$NL"

:0 fh w
* From_Addr ?? .
| formail -A"X-Meta-From: $From_Addr"

:0
* ^Subject:.*\/[^ 	].*
{
  SUBJ="$MATCH"
  TOLOG="$TOLOG Subject: $SUBJ$NL"
}

:0
* ^X-XS4ALL-Spam-Test:.*\/[0-9.]+
{ TOLOG="$TOLOG xST:$MATCH$NL" }

#===========================================================
# Create X-IP-CHAIN header
#-----------------------------------------------------------
QUAD1="0*([1-9][0-9]?|1[0-9][0-9]|2[0-4][0-9]|25[0-5])"
QUADn="0*([1-9]?[0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])"
IP=$QUAD1[.]$QUADn[.]$QUADn[.]$QUADn

# unset XIP
XIP

REGEXP="Received:"
MATEXP=$REGEXP".*[^0-9.]\[\/$IP"
:0
* $ ^\/$REGEXP(.+$)*$REGEXP.+$
{
  HEADERLINES = $MATCH
  INCLUDERC = $HOME/XIP.rc
}

:0 fh w
* XIP ?? .
| formail -A"X-IP-CHAIN: $XIP"

:0A
{ TOLOG="$TOLOG XIP:$XIP$NL" }

#===========================================================
# 0a. Set aside virus-messages, based on IP-chain
#-----------------------------------------------------------
# unset MATZ
MATZ

:0
* DONE ?? F
* XIP  ?? .
{
  # sets MATZ to IP-nr, or nothing
  INCLUDERC=$HOME/ip_virus.rc
  :0
  * MATZ ?? .
  {
    :0
    * MATZ ?? ^^()\/[0-9]+\.[0-9]+
    {
      LOG="$TOLOG --> $VIRS_BOX$NL"
      :0 $Lock
      $VIRS_BOX
    }

    #should never reach this
    LOGFILE="$LOGFILE.tsk"
    LOG="$TOLOG --> =tsk.$VIRS_BOX  $XIP$NL"
    :0 $Lock
    =tsk.$VIRS_BOX
  }
}

#===========================================================
# 0b. Set aside virus-messages, based on Header/Body
#-----------------------------------------------------------

:0
* ^Content-Type:.*(multipart|attachment)
{
  :0 B $Lock
  * ^ZGUuDQ0KJAAAAAAAAAB\+i6hSOurGATrqxgE66sYBQfbKATvqxgG59sgBLerGAdL1zAEA6sYBWPXV
  {
    LOGFILE="$LOGFILE.Swen"
    LOG="$TOLOG --Swen.1--($BSIZE)--> /dev/null$NL"
    :0
    /dev/null
  }

  :0D
  * ^SUBJECT:
  * B ?? > 140000
  * B ?? < 170000
  {
    LOGFILE="$LOGFILE.Swen"
    LOG="$TOLOG --Swen.2--($BSIZE)--> $VIRS_BOX$NL"
    :0 $Lock
    $VIRS_BOX
  }
}

:0
* From_Addr ?? ^^support@microsoft\.com^^
{
  LOG="$TOLOG --support@microsoft.com--($BSIZE)--> $VIRS_BOX$NL"
  :0 $Lock
  $VIRS_BOX
}

# -- Klez --
:0
* ^Content-Type:.*(multipart|attachment)
{
  :0B
  * > 50000
  * ^135AAItEjhyJRI8ci0SOGIlEjxiLRI4UiUSPFItEjhCJRI8Qi0SODIlEjwyLRI4IiUSPCItE$
  {
    LOG="$TOLOG --Klez1--($BSIZE)--> $VIRS_BOX$NL"
    :0 $Lock
    $VIRS_BOX
  }

  :0B
  * > 50000
  * ^Content-Type:[ ]*(audio/x-|application)
  * 1^0 ()<i?frame[ ]*src=(3d)?cid:
  * 1^0 ^--[^ ]+$$Content-
  * 1^0 ^--[^ ]+$--[^ ]+$
  {
    LOG="$TOLOG --Klez2--($BSIZE)--> $VIRS_BOX$NL"
    :0 $Lock
    $VIRS_BOX
  }
}


# -- Sircam --
:0
* ^Content-Type: multipart/mixed; \
   boundary="----[0-9A-F]+_Outlook_Express_message_boundary"
{
  :0
  * B ?? ^Content-(Type|Disposition):.*name=.*\
	\.(doc|xls|zip|txt|gif|jpg)\.(com|bat|pif|lnk|exe)
  {
    LOG="$TOLOG --Sircam--($BSIZE)--> $VIRS_BOX$NL"
    :0 $Lock
    $VIRS_BOX
  }
}

# -- BadTrans --
:0
* ^Content-Type: multipart/related;.*\
   boundary="====_ABC1234567890DEF_===="
* ^Received: from aol.com
* ^From:.*(<_|"  <)
{
  :0
  * B ?? ^Content-Type: audio/x-wav;
  {
    LOG="$TOLOG --BadTrans--($BSIZE)--> $VIRS_BOX$NL"
    :0 $Lock
    $VIRS_BOX
  }
}

# -- Yaha --
:0
* ^Content-Type: multipart/(alternative|mixed)
{
  :0
  * B ?? ^Content-Type: \
	(audio/x-|application).*;.*$.*name=.*\.(scr|com|bat|pif|lnk|exe)$
  {
    LOG="$TOLOG --Yaha--($BSIZE)--> $VIRS_BOX$NL"
    :0 $Lock
    $VIRS_BOX
  }
}

# -- .dbl.ext --
:0
* ^Content-Type: multipart/(alternative|mixed)
{
  :0 $Lock
  * B ?? ^Content-Type: \
	(application|audio/x-).*;.*($.*)?name=.*\/\..*\.(scr|com|bat|pif|lnk|exe)(")?$
  * MATCH ?? ^^\/.*
  {
    LOG="$TOLOG --($MATCH)--($BSIZE)--> $VIRS_BOX$NL"
    :0 $Lock
    $VIRS_BOX
  }
}

# -- another --
:0
* ^Content-Type: multipart/(alternative|mixed)
{
  :0 $Lock
  * B ?? ^Content-Type: \
	(application|audio-x).*;.*($.*)?name=.*\/\.(scr|com|bat|pif|lnk|exe)(")?$
  * MATCH ?? ^^\/.*
  {
    LOG="$TOLOG --($MATCH)--($BSIZE)--> $VIRS_BOX$NL"
    :0 $Lock
    $VIRS_BOX
  }
}


:0
* ^Content-Type:.*(attachment|multipart)
* B ?? ^\/Content-[a-z]+: \
       .*($[  ]+)*name=.*\.\
       (bat|com|exe|hta|lnk|pif|scr|shs|vb[se]|ws[fh])(")?$
{
  LOG="$TOLOG$MATCH --> $VIRS_BOX$NL"
  :0 $Lock
  $VIRS_BOX
}

:0
* ^\/Content-[a-z]+:.*name=.*\.\
  (bat|com|exe|hta|lnk|pif|scr|shs|vb[se]|ws[fh])(")?$
{
  LOG="$TOLOG$MATCH --> $VIRS_BOX$NL"
  :0 $Lock
  $VIRS_BOX
}


#===========================================================
# 1. White list, mailing lists
#-----------------------------------------------------------
# sets DONE to T if originator is to be trusted:
INCLUDERC=$HOME/.procmailrc.whitelist

:0
* DONE ?? F
* ^TO_()\/procmail(@(informatik|lists)\.rwth-aachen\.de|-users@procmail\.org|-dev-request@cuci\.nl)
{
  DONE=T
  Tag="[procmail]"

  :0 fh w
  * ! ^Reply-To:
  | formail -a"Reply-To: $MATCH"
  :0E
  { Tag="[procmail/RT]" }

  :0
  *$ ! ^Subject:.*$\Tag
  {
    # unset SUBJectTail
    SUBJT

    :0
    *$ ^Subject:${WSP}\/${NWSP}.*
    { SUBJT=" $MATCH" }


    :0
    *$ SUBJT ?? ^^${WSP}Re:${WSP}\/${NWSP}.*
    { SUBJT=" Re: $Tag $MATCH" }
    :0 E
    { SUBJT=" $Tag$SUBJT" }

    :0 fh w
    | formail -I"Subject:$SUBJT"
  }
  BOX="procmail$Mdir"
}


:0
* DONE ?? F
* ^TO_()\/m-o-o-t@topica\.com
{
  DONE=T
  Tag="[moot]"

  :0 fh w
  * ! ^Reply-To:
  | formail -a"Reply-To: $MATCH"

  :0
  *$ ! ^Subject:.*$\Tag
  {
    # unset SUBJectTail
    SUBJT

    :0
    *$ ^Subject:${WSP}\/${NWSP}.*
    { SUBJT=" $MATCH" }


    :0
    *$ SUBJT ?? ^^${WSP}Re:${WSP}\/${NWSP}.*
    { SUBJT=" Re: $Tag $MATCH" }
    :0 E
    { SUBJT=" $Tag$SUBJT" }

    :0 fh w
    | formail -I"Subject:$SUBJT"
  }
}


#===========================================================
# 2. Set aside bulk-messages, based on IP-chain
#-----------------------------------------------------------
# unset MATZ
MATZ

:0
* DONE ?? F
* XIP  ?? .
{
  # sets MATZ to IP-nr, or nothing
  INCLUDERC=$HOME/ip_bulk.rc
  :0
  * MATZ ?? .
  {
    :0
    * MATZ ?? ^^()\/[0-9]+\.[0-9]+
    {
      LOG="$TOLOG --> $BULK_BOX$NL"
      :0 $Lock
      $BULK_BOX
    }

    #should never reach this
    LOGFILE="$LOGFILE.tsk"
    LOG="$TOLOG --> =tsk.$BULK_BOX  $XIP$NL"
    :0 $Lock
    =tsk.$BULK_BOX
  }
}

ASIAN="(big5|euc-kr|gb2312|iso-(2022-(jp|kr)|8859-3)|ks_c)"

#===========================================================
# 3. Block spam-messages, marked as such by ISP
#-----------------------------------------------------------
:0
* DONE ?? F
* ^X-XS4ALL-(DNSBL|SPAM)-Warning: Sending machine is listed in
{

# ToDo: catch messages that are more than 2 days in the future

  :0
  * ^To:.*\/[-a-z0-9._]+@[^@>",; ]*
  {
    To_Addr = "$MATCH"

    :0
    * To_Addr ?? @\/.*
    { To_Domain = "$MATCH" }

    TOLOG="$TOLOG From_Domain=$From_Domain$NL"
    TOLOG="$TOLOG To_Addr=$To_Addr$NL"
    TOLOG="$TOLOG To_Domain=$To_Domain$NL"
  }


#non-compliant Message-Id
  :0
  * ^Message-ID: \/<[^@]+(@[^.]+)?>
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (nc-MsgId:$MATCH)$NL"
    :0
    /dev/null
  }

#xs4all-mxzilla Message-Id
  :0
  * ^Message-ID:( |\<)*\/<.+@mxzilla[0-9]+\.xs4all\.nl>
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (xs4-MsgId:$MATCH)$NL"
    :0
    /dev/null
  }

#non-compliant Date
  :0
  * ^Date:.*\/[^ 	].*
  * ! MATCH ?? ^^\
        (Sun|Mon|Tue|Wed|Thu|Fri|Sat),[ ]+\
	[0-3]?[0-9] \
	(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) \
	20[0-9][0-9] [0-2][0-9]:[0-5][0-9]:[0-5][0-9] \
	(-|\+)(0[0-9]|1[0-3])([03]0|[14]5)( *\(.*\))?^^
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (nc-Date: $MATCH)$NL"
    :0
    /dev/null
  }

#forged xs4all-IP
  :0
  * ^Received: from 194\.109\.6\.[0-9]+ \(\[\/[0-9.]+
  * ! MATCH ?? ^^194\.109\.6\.
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (forged 194-109-6-name:$MATCH)$NL"
    :0
    /dev/null
  }

  :0
  * ^(To|Cc):.*\/(post|web)master@i-?solution\..*
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (To:$MATCH)$NL"
    :0
    /dev/null
  }

  :0
  *$ ^To: $From_Addr$
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (To: Envelope-From)$NL"
    :0
    /dev/null
  }

  :0
  * ^Subject: =\?ISO-8859-1
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (Subject:encoded)$NL"
    :0
    /dev/null
  }

  :0
  * ^Content-Transfer-Encoding: 7bit
  * ^Content-Type: text/(plain|html);[ 	]*charset=\"?iso-8859-1
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (CTE:7BIT, CT:iso-8859-1)$NL"
    :0
    /dev/null
  }

  :0
  * ! ^Content-Transfer-Encoding:
  * ! ^Content-Type:.*charset=
  * ^Content-Type: \/text/html.*
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (no CTE, CT:$MATCH)$NL"
    :0
    /dev/null
  }

  :0
  * ^To: $\To_Name <
  * ^Content-Type: multipart/mixed
  * ^Importance: Normal
  * From:.*<$\From_Addr>
  * ^X-MSMAIL-Priority: Normal
  * ^X-Priority: 3
  * ^X-Sender:.*<$\From_Addr>
  * ^X-Encoding: MIME
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (no CTE, CT:$MATCH)$NL"
    :0
    /dev/null
  }

  :0
  *$ ^To:.*\
     ^References: <[A-Z0-9]+@$\{To_Domain}>\
     ^In-Reply-To: <[A-Z0-9]+@$\{To_Domain}>\
     ^Message-ID: <[A-Z0-9]+@$\{From_Domain}>
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (spammish Subject)$NL"
    :0
    /dev/null
  }

  :0
  * ^To: \/()<Undisclosed\.Recipients@\.>
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (To: $MATCH)$NL"
    :0
    /dev/null
  }


  To_rex="\<r[.a-z0-9]+@xs4all\.nl"
  :0
  *$ ^To:.*\/$To_rex.*$To_rex.*$To_rex.*$To_rex
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (To: $MATCH)$NL"
    :0
    /dev/null
  }


  :0
  * -2^0
  *  1^0  ^To:.*\<rvt[-a-z0-9._]*@[-a-z0-9._]+\.([a-z][a-z][a-z]?)($|[^-a-z0-9._])
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (To: 3+ rvt's)$NL"
    :0
    /dev/null
  }



#  :0
#  * ^Content-Disposition: inline
#  {
#    LOGFILE="$LOGFILE.dev0"
#    LOG="$TOLOG --> /dev/null (ContDisp:inline)$NL"
#    :0
#    /dev/null
#  }

#asian-h
  :0
  *$ ^((Subject|To|From):.*=[?]|Content-Type:.*charset=\"?)\/$ASIAN
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (Asian header:$MATCH)$NL"
    :0
    /dev/null
  }

#asian-b
  :0BD
  *  -1^1 .
  *   2^1 =[0-9A-F][0-9A-F]
  *  20^1 [ -þ]
  *  20^1 =[89A-F][0-9A-F]
  * -20^1 [„Ž”™… ƒ‡Š‚ˆ‰]
  * -20^1 =(E[01245789AB]|C[45]|[DF]6)
  {
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (Asian body)$NL"
    :0
    /dev/null
  }


  :0
  * DONE ?? ^^^^
  * ^Subject:.*\<\/(\
	[0-9]+%|\
	add length|\
	advertise|\
	Bring .*! [ a-z]+|\
	business\
	college girls|\
	degrees?|\
	diet|\
	diplomas?|\
	dvd|\
	embarassed|\
	for less|\
	from [a-z]+\.\.\.|\
	get in shape|\
	girls .* college|\
	gratis sms|\
	hi!|\
	investment|\
	laid|\
	less expensive|\
	lose weight|\
	money|\
	\$\$\$|\
	mortgage|\
	no doc visit|\
	paying too much|\
	penis|\
	perfect health|\
	pharmacy|\
	Pheromone|\
	pills|\
	Prescription( Drug)?s|\
	refinanced?|\
	Re \[[0-9]+\]:|\
	save on gas(oline)?|\
	sex\
	teen|\
	viagg?raa?|\
	virginity|\
	weekend drug|\
	\[ADV\])\>
  {
    :0  # remove trailing NLs
    * MATCH ?? ^\/.*
    { }
    LOGFILE="$LOGFILE.dev0"
    LOG="$TOLOG --> /dev/null (subj:$MATCH)$NL"
    :0
    /dev/null
  }
#VERBOSE=no

#has attachment
  :0
  * Content-Type: multipart/(alternative|mixed|related)
  {
    LOG="$TOLOG --> xs4.att.$SPAM_BOX$NL"
    :0 $Lock
    xs4.att.$SPAM_BOX
  }

#is html/base64
#  :0
#  * ^Content-Type: text/html
#  * ^Content-Transfer-Encoding: base64
#  {
#    LOG="$TOLOG --> /dev/null (CT:html, CTE:base64)$NL"
#    :0
#    /dev/null
#  }

#is html
  :0
  * ^Content-Type: text/html
  {
    LOG="$TOLOG --> xs4.html.$SPAM_BOX$NL"
    :0 $Lock
    xs4.html.$SPAM_BOX
  }

#default
  LOG="$TOLOG --> xs4.$SPAM_BOX$NL"
  :0 $Lock
  xs4.$SPAM_BOX
}

#===========================================================
# 4. Block spam-messages, based on IP-chain
#-----------------------------------------------------------
# unset MATZ
MATZ

:0
* DONE ?? F
* XIP  ?? .
{
  # sets MATZ to IP-nr, or nothing
  INCLUDERC=$HOME/ip_spam.rc
  :0
  * MATZ ?? .
  {
    :0
    * MATZ ?? ^^()\/[0-9]+\.[0-9]+
    {
      LOG="$TOLOG --> $SPAM_BOX$NL"
      :0 $Lock
      $SPAM_BOX
    }

    #should never reach this
    LOG="$TOLOG --> =tsk.$SPAM_BOX  $XIP$NL"
    :0 $Lock
    =tsk.$SPAM_BOX
  }
}


#===========================================================
# 5. Block messages in an Asian language
#-----------------------------------------------------------
:0
* DONE ?? F
{

#asian-h
  :0
  *$ ^((Subject|To|From):.*=[?]|Content-Type:.*charset=\"?)\/$ASIAN
  {
    LOG="$TOLOG --> csh.$SPAM_BOX (h:$MATCH)$NL"
    :0 $Lock
    csh.$SPAM_BOX
  }


#asian-b
  :0BD
  *  -1^1 .
  *   2^1 =[0-9A-F][0-9A-F]
  *  20^1 [ -þ]
  *  20^1 =[89A-F][0-9A-F]
  * -20^1 [„Ž”™… ƒ‡Š‚ˆ‰]
  * -20^1 =(E[01245789AB]|C[45]|[DF]6)
  {
    LOG="$TOLOG --> csb.$SPAM_BOX (b)$NL"
    :0 $Lock
    csb.$SPAM_BOX
  }
}


#============================================================
# Create X-userid-headers
#------------------------------------------------------------
LOCUSR=$MAILNAME
ADREXP=$MAILADDR

:0 fh w
*$ ^TO()\/$ADREXP
| formail -A"$XTO $LOCUSR ($MATCH)"

:0 E fh w
*$ ^Received:${WSP}.*()\/for <$ADREXP>
| formail -A"$XTO $LOCUSR ($MATCH)"


#====================================
# Append message to a local file
#------------------------------------
:0c
{
  LOG="$TOLOG --> $BOX$NL"
  :0 $Lock
  $BOX
}

##############################################################

// ----
// included file: ip_bulk.rc
// ----
:0
* ! MATZ ?? .
* $ XIP  ?? ()\[\/(\
12\.28|\
17\.203|\
62\.(53|154|216)|\
66\.35|\
69\.24|\
128\.242|\
130\.94|\
134\.58|\
145\.7|\
148\.87|\
167\.216|\
192\.87|\
193\.(131|195)|\
194\.(12|219|229)|\
195\.(21|64|193)|\
206\.16|\
207\.(46|170|194)|\
208\.39|\
209\.(11|51|61|71|113|246)|\
212\.(71|177|204|221)|\
213\.(196)|\
216\.(10|91)|\
217\.(115|170)|\
_)\.$QUADn\.$QUADn
{
  MATZ=$MATCH"/16"
  LOG="-B- MATZ="$MATZ$NL
}



:0
* ! MATZ ?? .
* $ XIP  ?? ()\[\/(\
62\.58\.28|\
62\.177\.15|\
80\.60\.244|\
_)\.$QUADn
{
  MATZ=$MATCH"/24"
  LOG="-B- MATZ="$MATZ$NL
}

// ----
// included file: ip_spam.rc
// ----
  :0
  * ! MATZ ?? .
  * $ XIP ?? [[][1-9]\.$QUADn\.$QUADn\.$QUADn]
  * $ XIP ?? [[]\/(\
1\.22|\
2\.(168|186)|\
3\.167|\
4\.(1[169]|2[12]|3[35]|4[2367]|54|6[0-245])|\
5\.151|\
_)\.$QUADn\.$QUADn
  {
    MATZ=$MATCH
#    LOG="-s- MATZ="$MATZ$NL
  }

  :0
  * ! MATZ ?? .
  * $ XIP ?? [[]([1-5][0-9]|6[0-3])\.$QUADn\.$QUADn\.$QUADn]
  * $ XIP ?? [[]\/(\
12\.(3[49]|4[02]|6[45]|77)|\
12\.1(0[125]|11|30|4[58]|5[034]|66)|\
12\.2(0[68]|1[235-8]|2[04-689]|3[2578]|4[06-8]|5[0-4])|\
15\.229|\
17\.2(0[036]|27|54)|\
19\.61|\
21\.30|\
23\.205|\
24\.([0-689]|1[124-8]|2[1-46-9]|3[015-9]|4[24578]|5[013-8]|6[04589]|7[389]|8[0168]|9[124578])|\
24\.1(0[025-7]|1[256]|2[034689]|3[0-268]|4[016-8]|5[390]|6[0-24-9]|7[05-9]|8[0-24-7]|9[02679])|\
24\.2(0[0-357]|1[4-8]|2[26]|3[1249]|4[257-9]|5[12])|\
26\.(35|99)|\
28\.157|\
30\.(70|189|215)|\
31\.153|\
32\.(162|215)|\
35\.9|\
36\.17|\
38\.(144|151)|\
39\.148|\
44\.54|\
48\.212|\
49\.238|\
51\.(4|110|241)|\
52\.217|\
54\.10|\
56\.(40|73)|\
58\.228|\
59\.195|\
60\.199|\
61\.([24-9]|1[013-689]|2[0-8]|3[0-9]|4[0-389]|5[0-9]|6[0-8]|7[0-9]|8[0-6]|9[4-9])|\
61\.1([0-9][0-9])|\
61\.2(0[0-9]|1[0-9]|2[0-9]|3[0-7]|4[0-389]|5[0-5])|\
62\.([457]|1[26]|2[0179]|3[036]|4[079]|5[2689]|6[0-24579]|7[06-9]|8[1459]|9[059])|\
62\.1(0[257-9]|1[02-478]|2[78]|3[139]|4[018]|5[02389]|6[13568]|7[2379]|8[139]|9[02-5])|\
62\.2(0[1568]|1[1-356-8]|2[47]|3[148]|4[1-58]|5[013])|\
63\.(12|36|5[29]|6[2458]|7[02-4]|8[45]|9[3456])|\
63\.1(0[013-57-9]|1[4-69]|2[02]|36|4[0346-9]|5[037]|6[346-9]|7[0245]|9[68])|\
63\.2(0[1357-9]|1[17]|2[024]|3[1-468]|4[19]|5[25])|\
_)\.$QUADn\.$QUADn
  {
    MATZ=$MATCH
#    LOG="-s- MATZ="$MATZ$NL
  }

  :0
  * ! MATZ ?? 0.
  * $ XIP ?? [[](6[4-9]|[7-9][0-9])\.$QUADn\.$QUADn\.$QUADn]
  * $ XIP ?? [[]\/(\
64\.([12457]|1[2459]|2[13679]|3[2357-9]|4[0589])|\
64\.(5[257]|6[012569]|7[0178]|8[02568]|9[145])|\
64\.1(0[57-9]|1[0248]|2[2-57]|3[2-6]|46|5[246-9]|6[15]|7[0167]|8[679]|9[15])|\
64\.2(1[1-689]|2[014-7]|30|4[136-8]|5[1-3])|\
65\.([0-468]|1[0-59]|2[4579]|3[0-57]|4[24]|5[046-9]|6[579]|71|8[13489]|9[013-6])|\
65\.1(0[0-8]|1[4-9]|2[139]|3[03489]|4[0-2]|5[08]|6[0-24-79]|7[0-4]|9[0467])|\
65\.2(0[1-357-9]|1[135])|\
66\.([1-36-8]|1[02-49]|2[04-8]|3[0358]|4[03568]|5[1267]|6[046-8]|7[024-8]|8[237]|9[26])|\
66\.1(0[3568]|1[013-589]|2[18]|3[03-79]|4[013]|5[06]|6[349]|7[16-8]|8[038]|9[1279])|\
66\.2(0[13578]|1[0124-68]|2[7-9]|3[1-369]|41)|\
67\.(8|3[2458]|42|6[5-79]|8[019]|9[67]|10[45]|11[59]|12[1-3]|16[12]|193|20[23]|21[17]|225|234|243)|\
68\.([1-35689]|1[078]|21|3[25]|4[125]|5[026]|6[0-3568]|7[134]|8[238]|96|11[3479]|12[28]|14[46]|155|16[68]|225)|\
69\.(1|3|22|3[24]|44|13[28])|\
71\.(87|252)|\
73\.(56|113)|\
76\.28|\
80\.([17]|1[13469]|2[24589]|3[2458]|4[89]|5[367]|6[045689]|7[0-3589]|8[0237-9]|9[0-6])|\
80\.1(16|2[67]|3[379]|45|6[14]|7[89]|8[0169]|92)|\
80\.2(0[01]|1[258]|2[24]|3[078]|4[02-46-9]|5[0-5])|\
81\.([0-689]|1[36-9]|2[0-68]|3[04]|4[89]|5[013]|68|79|89|9[014589])|\
81\.1(0[4-6]|28|3[24]|52|7[2467]|9[35689])|\
81\.2(0[0-2]|1[1-578]|2[23])|\
82\.(3[49]|66|128)|\
88\.167|\
89\.59|\
93\.(45|198)|\
94\.94|\
95\.(199|249)|\
96\.49|\
98\.178|\
99\.(174|206)|\
_)\.$QUADn\.$QUADn
  {
    MATZ=$MATCH
#    LOG="-s- MATZ="$MATZ$NL
  }

  :0
  * ! MATZ ?? .
  * $ XIP ?? [[]1[0-9][0-9]\.$QUADn\.$QUADn\.$QUADn]
  * $ XIP ?? [[]\/(\
100\.0|\
101\.79|\
102\.7[04]|\
103\.127|\
104\.(81|16[16])|\
105\.85|\
106\.98|\
107\.(86|205)|\
109\.115|\
110\.(171|220|237)|\
112\.66|\
114\.230|\
115\.202|\
116\.224|\
117\.142|\
118\.(123|145)|\
120\.72|\
122\.(188|231)|\
125\.197|\
126\.(25|80)|\
127\.1(23|84)|\
128\.(32|4[25]|5[14]|112|121|134|146|208|24[12]|254)|\
129\.(37|60|136|186|249|254)|\
130\.(34|54|69|87|94|153|158|236|252)|\
131\.(36|11[23]|178|206|248)|\
132\.(16|133|17[039]|182|222|24[78]|254)|\
133\.$QUADn|\
134\.(75|99|137|160|180|196|208|237)|\
136\.(187|198)|\
137\.(68|132|153|164|189)|\
138\.(16|30|10[17]|153|21[23]|243|252)|\
139\.(82|13[04]|142|15[24]|17[59]|182|206|223)|\
140\.(81|9[26]|109|11[0-9]|12[0-9]|13[0-8]|14[28]|186|191)|\
141\.(74|15[04]|178|211|22[39])|\
142\.(154|16[13]|186|206)|\
143\.(5|54|89|9[04]|10[6-8]|125|136|147|171|201|221|248|253)|\
144\.(1|2[23]|122|13[5-7]|176|199|206|21[34])|\
145\.58|\
145\.2(08|18|36)|\
146\.(5[16]|90|117|134|164|186)|\
147\.([68]|4[3567]|6[05]|157|162|176|208)|\
148\.(31|63|87|161|20[1-9]|2[1-4][0-9]|250)|\
150\.([1-9]|[1-9][0-9]|100|150|16[1-5]|183|254)|\
151\.(3[89]|158|172|196|203)|\
152\.(17|75|84|9[29]|10[1-4]|149|163|226)|\
153\.(20|197)|\
154\.(5|10|20|3[34]|72)|\
155\.(37|69|73|132|160|211|223|230|251)|\
156\.(17|147)|\
157\.([1-9]|1[0-9]|20|6[3-9]|7[0-9]|8[0-26]|9[12]|10[1-9]|11[0-9]|120|139|179|186|197|20[56]|238|252)|\
158\.(44|97|108|132|152|182|19[389]|20[0-9]|21[0-7]|252)|\
159\.(16|80|93|134|211|22[68])|\
160\.(1[1-9]|2[0-9]|30|7[45]|96|105|18[5-9]|19[0-9]|20[0-4]|215|23[3-9]|24[0-9]|25[0-2])|\
161\.([89]|2[04]|58|64|7[59]|9[3-6]|118|12[26]|139|14[28]|191|20[07]|24[68])|\
162\.(4|84|105)|\
163\.(1[03-9]{2[0-9]|3[0-2]|4[2-9]|5[0-9]|61|125|1[34][0-9]|152|180|21[0-9]|22[0-7]|239)|\
164\.(4[1369]|7[0178]|85|109|115|12[45]|16[0-3])|\
165\.(1[4-8]|2[19]|76|9[369]|10[0-28]|121|13[23]|141|154|186|194|20[29]|213|22[29]|24[1-467])|\
166\.(79|81)|\
166\.1(0[02-4]|1[1489]|2[15]|64)|\
167\.(139|169|175|206|252)|\
168\.(7[07-9]|83|9[356]|10[16]|115|12[06]|13[189]|143|154|16[05]|188|219|226|24[389]|255)|\
169\.(140|207|210)|\
170\.(25|38|51|66|70|95|155|169|179|210|247)|\
171\.68|\
172\.(16|31|131|195)|\
174\.125|\
177\.9|\
178\.191|\
183\.7|\
185\.128|\
186\.206|\
188\.(133|200)|\
190\.52|\
192\.([05]|16|26|3[13]|4[1-37]|5[0-2458]|6[78]|7[026]|8[02-46-8]|9[14])|\
192\.1(0[0-48]|1[1467]|2[2-49]|3[2-689]|4[6-9]|5[02-4679]|6[09]|7[24]|88|9[02578])|\
192\.2(0[367]|18|2[38]|3[134]|4[459]|51)|\
193\.(41|7[07]|8[05]|109|110|12[45]|14[04]|15[49]|165|17[03]|189|192|21[79]|22[06]|23[1-3]|243|25[23])|\
194\.(2[26-8]|46|5[48]|6[57]|7[348]|8[457]|97)|\
194\.1(0[25]|1[27]|3[145]|48|5[1348]|7[37]|8[56]|90)|\
194\.2(0[46]|1[367]|2[0269]|36|47)|\
195\.([2357-9]|1[24689]|2[24-68]|3[3489]|4[2467]|5[478]|6[248]|7[024-7]|87|9[0-246-8])|\
195\.1(0[12]|1[0257]|2[0-2489]|3[13478]|4[46]|5[12478]|6[126-8]|7[0458]|8[28]|9[0-3])|\
195\.2(0[0-25689]|1[0489]|2[248]|3[0489]|4[124]|254)|\
196\.([13]|2[357]|32|40)|\
197\.17|\
198\.([59]|1[27]|22|3[01]|49|5[0148]|6[2-5]|7[068]|87|9[279]|139|14[27]|151|17[238]|184)|\
199\.(4|14|8[459]|9[34]|10[35]|17[0-24]|18[125]|210|236|24[38]|25[04])|\
_)\.$QUADn\.$QUADn
  {
    MATZ=$MATCH
#    LOG="-s- MATZ="$MATZ$NL
  }

  :0
  * ! MATZ ?? .
  * $ XIP ?? [[]20[0-9]\.$QUADn\.$QUADn\.$QUADn]
  * $ XIP ?? [[]\/(\
200\.([01459]|1[0-46]|2[1347]|3[0-9]|4[0-24579]|5[02-4679]|6[013-9]|7[0-9]|8[3-79]|9[2-6])|\
200\.1(0[0-6]|2[89]|[3-9][0-9])|\
200\.2([0-4][0-9]|5[0-5])|\
201\.(5|102|197)|\
202\.([0-9]|[12][0-9]|3[0-58]|4[0-578]|5[2-79]|[6-9][0-9])|\
202\.1(0[0-9]|1[0-9]|2[0-9]|3[0-46-8]|4[03-68]|5[013-9]|6[0-689]|7[0-24-8]|[89][0-9])|\
202\.2([0-4][0-9]|5[0-5])|\
203\.(2|1[27]|2[379]|3[135]|4[167]|5[1569]|6[4-9]|7[0-57-9]|8[0-9]|9[0-589])|\
203\.1(0[13-79]|1[1-8]|2[013-9]|3[0-35-9]|[45][0-9]|6[0-35689]|7[02-9]|8[0-9]|9[02-9])|\
203\.2(0[03-57-9]|1[0-35-8]|2[02-9]|[34][0-9]|5[0-5])|\
204\.([14]|3[02]|58|7[19]|8[079]|92|107|118|12[467]|14[57]|153|18[18]|213|231|25[23])|\
205\.(96|128|137|15[28]|166|18[48]|197|20[16]|21[178]|23[267]|24[47]|252)|\
206\.(1[359]|2[78]|47|6[17]|8[02]|96)|\
206\.1(07|1[26]|2[68]|3[259]|43|5[3-5]|6[289]|7[03]|87|90)|\
206\.2(10|2[0159]|30|46|53)|\
207\.([038]|32|41|6[89]|79|8[89]|93)|\
207\.1(06|15|24|3[1467]|5[04589]|7[134]|8[03]|9[0-2)|\
207\.2(0[26]|1[578]|2[1459]|30|4[689]|5[03])|\
208\.([124569]|1[2-478]|2[124]|3[0237-9]|4[5-9]|5[06]|6[01])|\
208\.1(28|3[1-3]|4[24]|5[38]|6[59]|7[6-9]|8[01578]|9[06-8])|\
208\.2(06|21|3[0145]|49|5[0145])|\
209\.([1-4]|1[01379]|2[569]|3[159]|4[12]|5[0-24]|6[1347-9]|7[03]|8[168]|99)|\
209\.1(0[015]|1[245]|2[0356]|3[235-7]|4[15]|5[01]|6[2457]|7[067]|8[09]|9[1368])|\
209\.2(0[2358]|1[013467]|2[1568]|3[579]|4[02569]|5[35]|71)|\
_)\.$QUADn\.$QUADn
  {
    MATZ=$MATCH
#    LOG="-s- MATZ="$MATZ$NL
  }

  :0
  * ! MATZ ?? .
  * $ XIP ?? [[]2([1-4][0-9]|5[0-5])\.$QUADn\.$QUADn\.$QUADn]
  * $ XIP ?? [[]\/(\
210\.([0-6]|1[0-79]|2[0-9]|3[0-9]|4[0-8]|5[0-9]|6[0-9]|7[0-9]|8[0-35-9]|9[0-9])|\
210\.1([0-8][0-9]|9[0-9])|\
210\.2(0[0-9]|1[016-9]|2[0-9]|3[0-9]|4[0-589]|5[0-5])|\
211\.([0-9]|1[0-9]|2[0-5]|3[2-9]|4[0-9]|5[0-9]|6[0-9]|7[0-9]|8[0-9]|9[0-9])|\
211\.1([0-9][0-9])|\
211\.2([0-4][0-9]|5[0-5])|\
212\.([0124-8]|1[0-79]|2[02-46-9]|3[0-48]|4[0-24-9]|5[037-9]|6[14579]|7[02-4689]|8[35-8]|9[12468])|\
212\.1(0[0157-9]|1[13-589]|2[024-79]|3[135]|4[2356]|5[024-689]|6[3-58]|7[124-7]|8[1378]|9[02-489])|\
212\.2(0[2-49]|1[058]|2[037]|3[389]|4[08]|5[023])|\
213\.(1|1[1346]|2[2-4679]|3[37]|4[2368]|5[369]|6[078]|7[3-7]|8[0-24-79]|9[236-8])|\
213\.1(0[67]|12|2[02389]|3[1-9]|4[0-578]|5[0-689]|6[1357-9]|7[0-267]|8[0-79]|9[0346])|\
213\.2(0[12458]|1[059]|2[18]|3[24689]|4[2-478]|5[0-5])|\
214\.170|\
216\.([0346]|1[25689]|2[1257-9]|3[2-689]|4[0359]|5[347]|6[2357]|7[12478]|87|9[1349])|\
216\.1(0[0349]|1[0-3578]|2[0236-9]|3[13569]|4[1-47-9]|5[35-7]|6[0147]|7[1349]|88|9[0146])|\
216\.2(0[02356]|1[167-9]|2[14]|3[014679]|4[0-247]|5[01245])|\
217\.([1689]|1[02-9]|2[0-689]|3[1459]|4[05]|5[89]|6[46-9]|7[02-46-9]|97)|\
217\.1(0[679]|1[46-8]|2[689]|3[136]|4[46-8]|5[0189]|6[024589]|7[013-5]|9[4-689])|\
217\.2(1[15-7]|2[38])|\
218\.([0-9]|[12][0-9]|3[0-246-9]|[4-9][0-9])|\
218\.1(0[2-9]|1[02-9]|[2-7][0-9]|8[0-46-9]|9[0-9])|\
218\.2(0[0-58]|1[26-9]|2[0-9]|3[0-9]|4[0-7]|5[2-4])|\
219\.([0-9]|[1-5][0-9]|6[0-389]|7[0-26-8]|8[01]|9[0-9])|\
219\.1([0-5][0-9])|\
219\.2([0-2][0-9]|3[2-9]|4[0-9]|5[0-5])|\
220\.([0-9]|[1-9][0-9]|10[4-9]|1[126-9][0-9]|2[01][0-9]|22[0-3]|24[89]|25[0-245])|\
221\.([0-9]|1[0-36-9]|[2-9][0-9]|1[01][0-9]|120|13[89]|14[0-9]|15[0-9]|16[0-8])|\
222\.222|\
226\.124|\
230\.12|\
235\.75|\
237\.2(00|54)|\
241\.71|\
242\.10|\
248\.45|\
250\.(155|254)|\
254\.139|\
_)\.$QUADn\.$QUADn
  {
    MATZ=$MATCH
#    LOG="-s- MATZ="$MATZ$NL
  }

# 2003-03-28: removed    66.35  lists.sourceforge.net
# 2003-03-28: removed   207.56  delivery.pens.microsoft.com
# 2003-05-01: removed   203.22  globat.com

// ----
// included file: XIP.rc
// ----
# Version: 2002-04-07  19:30

:0
* HEADERLINES ?? $ ^$MATEXP
{
  :0
  * ! MATCH ?? ^^194\.109\.(6|127)\.
  * ! MATCH ?? ^^194\.109\.13\.140^^
  * ! MATCH ?? ^^24\.132\.0\.158^^
  {
    :0
    * ! MATCH ?? ^^10\.
    * ! MATCH ?? ^^127\.0\.0\.1^^
####* ! MATCH ?? ^^169\.254\.
    * ! MATCH ?? ^^172\.(1[6-9]|2[0-9]|3[01])\.
    * ! MATCH ?? ^^192\.168\.
    * ! XIP   ?? $ ^.*\[$MATCH]
    {
      XIP=$XIP[$MATCH]
    }
#    :0 E
#    {
#      XIP=$XIP{$MATCH}
#    }
  }

  :0
  * HEADERLINES ?? $ ^$REGEXP(.*$)*\/$REGEXP(.*$)*
  {
    HEADERLINES = $MATCH
    INCLUDERC = $_
  }
}

# 194.109.6.0/8  = my ISP's mailservers
# 194.109.127.0/8  = my ISP's mailservers
# 194.109.13.140  = my IP-nr
# 24.132.0.158  = my other IP-nr

# 10.0.0.0/24    = IP private-address range
# 127.0.0.1      = localhost
# 169.254.0.0/16 = Microsoft AutoAddress range (DHCP)
# 172.16.0.0/20  = IP private-address range
# 192.168.0.0/16 = IP private-address range

// ----
// included file: .procmailrc.from
// ----
#From succes.nu@wanadoo.nl  Tue Oct 26 21:44:31 1999

:0  # succes.nu@wannadoo.nl
* From ?? ^^\/[^ ]+
{ From_Addr = "$MATCH" }

:0  # wannadoo.nl
* From_Addr ?? @\/.*
{ From_Domain = "$MATCH" }

:0  # Tue Oct 26 21:44:31 1999
* From ?? ^^[^ ]+ +\/[^ ].*
{ From_DaTim = "$MATCH" }

:0  # Tue
* From_DaTim ?? ^^\/...
{ DDD = "$MATCH" }

:0  # Oct
* From_DaTim ?? ^^... \/...
{ MMM = "$MATCH" }

# Convert the three letter abbreviation to numbers.
Mmm2MM = "Jan01Feb02Mar03Apr04May05Jun06Jul07Aug08Sep09Oct10Nov11Dec12"
:0
* Mmm2MM ?? $ ^^.*($MMM)\/[0-9][0-9]
{ MM = "$MATCH" }

:0  # 26
* From_DaTim ?? ^^... ... +\/[0-9]+
{ 
  From_D = "$MATCH"
  DD     = "$From_D"

  :0
  * ! DD ?? ..
  { DD = 0$DD }
}

:0
* From_DaTim ?? ^^... ... +[0-9]+ \/.*
{ From_Time = "$MATCH" }

:0  # 21
* From_Time ?? ^^\/[0-9]+
{ HH = "$MATCH" }

:0  # 44
* From_Time ?? ^^[0-9]+:\/[0-9]+
{ NN = "$MATCH" }

:0  # 31
* From_Time ?? ^^[0-9]+:[0-9]+:\/[0-9]+
{ SS = "$MATCH" }

:0  # 1999
* From_Time ?? ^^[0-9]+:[0-9]+:[0-9]+ \/[0-9]+
{ YYYY = "$MATCH" }

:0  # 99
* YYYY ?? ^^[0-9][0-9]\/[0-9]+
{ YY = "$MATCH" }

# LOG="From $From_Addr  $DDD $MMM $DD $HH:$NN:$SS $YYYY $MM/$YY$NL"