Hello, In the case of ham mail delivered from this ML, the X-MailFrom: field in the header of the email is like this; X-MailFrom: SRS0=nTug=NN=gmail.com=knurpht.opensuse@opensuse.org But the X-MailFrom: field in all spam mails are, X-MailFrom: rebelssasha@gmail.com Now, I can say goodbye to spammers as a procmail user with this script; :0 H * 9876543210^0 ^Return-Path:.*users-bounces@lists.opensuse.org * 9876543210^0 ^Return-Path:.*users-bounces@opensuse.org { :0 H * 9876543210^0 ^X-MailFrom:.*@opensuse.org mh/Linux/suse-en/. :0 /dev/null } Best Regards. --- ┏━━┓彡 Masaru Nomiya mail-to: m.nomiya+suse @ gmail.com ┃＼／彡 ┗━━┛ "Distinguish between what is meaningful to me and what is meaningless, and forget what is meaningless to me. This is where individuality comes into play. This is a function that computer cannot perform." -- Shigehiko Toyama (in Japanes) --