filter based on "From: " content

Recently I get lots spam mails typically with faked "From:" and "To:" like From: "joe@mysite.org" <extusr@water.ne.jp> To: joe@mysite.org where "joe@mysite.org" is our local user. My problem with procmailrc approach is that 'formail' extraction will largely leave out the "joe@mysite.org" part in the "From:" line. Before I may attempt an external script to do the catch, I wonder is there already, or possibly some simple filter to catch these within procmailrc? Zhiliang