On Tue, 2004-03-30 at 17:37, Harry Putnam wrote: [...] > You may get some REALLY inventive regex here... I have before. > But I think you're working too hard and should resort to > spamassassins own tools. This can be done with a push/pull technique. > > Investigate spamassassins `meta' handle. (In place of the more normal > `header' handle) [...]
Thanks, but I should have mentioned that I'm NOT testing the from header. I'm trying to catch messages that look like bounced messages from me but that don't include my correct e-mail-info. I already have a rule that does what you suggested, it looks like: header M8RAM_FAKE_FROM From =~ /(?<!(?:^Bram\sMertens\s)|(?:^Mertens\sBram\s))<my_e-mail-address>/ score M8RAM_FAKE_FROM 1.0 describe M8RAM_FAKE_FROM From contains my address but I didn't send this! But this rule doesn't trigger on these messages because I'm looking for a match inside the body of a message, not a header... Again thanks for the help Bram -- # Mertens Bram "M8ram" <[EMAIL PROTECTED]> Linux User #349737 # # SuSE Linux 8.2 (i586) kernel 2.4.20-4GB i686 256MB RAM # # 6:27pm up 8 days 22:04, 11 users, load average: 0.09, 0.07, 0.02 # -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] <http://learn.perl.org/> <http://learn.perl.org/first-response>
