I don't see anything wrong there, Scott. When I run it through "The Regex Coach", I did have to remove the spaces at the end of the line in your email and then it did work. So, make sure there is no whitespace at the end of the line in your test file? Make sure the filter file really is running and not being END'ed before that line is encountered?
Andrew. ________________________________ From: Scott Fisher [mailto:sfis...@farmprogress.com] Sent: Wednesday, November 16, 2011 9:49 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] PCRE help Subject: [Possible SPAM]=?KOI8-U?B?y8/OxqbExc7DpsrOpiDVx8/EyQ==?= I am trying to catch the a spam with above subject listed with the below line: ANYWHERE 25 PCRE (?i:((charset|content|lang)=.{0,2}koi8-(r|t|u|ru))|(=\?koi8-(r|t|u|ru)\? [bq]\?)) Can anyone see what I'm doing wrong? Scott Fisher | IT Director FARM PROGRESS COMPANIES | 255 38th Avenue, Suite P | St. Charles, IL 60174-5410 630/462-2323 | Fax 630/462-2957 | sfis...@farmprogress.com <mailto:sfis...@farmprogress.com> www.FarmProgress.com <http://www.farmprogress.com/> This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. Although Farm Progress Companies has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. This message (and any associated files) may contain confidential, proprietary and/or privileged material and access to these materials by anyone other than the intended recipient is unauthorized. Unauthorized recipients are required to maintain confidentiality. Any review, retransmission, dissemination or other use of these materials by persons or entities other than the intended recipient is prohibited and may be unlawful. If you have received this message in error, please notify us immediately and destroy the original. Ce message et tout document qui y est eventuellement joint peuvent contenir de l'information confidentielle ou exclusive. L'acces a cette information par quiconque autre que le destinataire designe en est donc interdit. Les personnes ou les entites non autorisees doivent respecter la confidentialite de cette information. La lecture, la retransmission, la communication ou toute autre utilisation de cette information par une personne ou une entite non autorisee est strictement interdite. Si vous avez recu ce message par erreur, veuillez nous en aviser immediatement et le detruire. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
<<Outlook.jpg>>
<<image001.gif>>
