You are on the right track. The only way to be absolutely sure is to parse the MTA Envelope ie the Recieved headers. Also I noticed you left out Cc: field which may have just been a keying omission :)
Update: merlyn point is valid if not entirely clear. Some MDA's (Mail Delivery Agents) will throw away MTA envelope information before delivery, but since you stated that you were intercepting mail from the MTA (sendmail) the envelope will be intact. Procmail has been available as an optional direct MDA for sendmail as of V8.7. (sendmail.mc -- Feature(`local_procmail'), most major Linux distro's have it present sendmail.mc though it may be commented out) and certainly is a candidate solution for your problem but not the only solution. Although local_procmail configuration has been added as a M4 feature you can actually modify the sendmail local mail delivery parameters to point to any MDA you want including a (hrumph) home rolled Perly.
# sendmail.cf after local_promail turned on
A=procmail -Y -a $h -d $u
mitd-Made in the Dark
'Interactive! Paper tape is interactive!
If you don't believe me I can show
you my paper cut scars!'
Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
Read Where should I post X? if you're not absolutely sure you're posting in the right place.
Please read these before you post! —
Posts may use any of the Perl Monks Approved HTML tags:
You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
- a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
Link using PerlMonks shortcuts! What shortcuts can I use for linking?
See Writeup Formatting Tips and other pages linked from there for more info.
| & || & |
| < || < |
| > || > |
| [ || [ |
| ] || ] ||